Manage how we use cookies and similar technologies. Your choices apply to this browser and device.
In the EU, UK, EEA and Switzerland — and whenever we can't tell where you're visiting from — Analytics, Support and Marketing start off blocked until you turn them on below; everywhere else they start on and you can turn them off. See our Privacy Policy for details.
Required for authentication, security, and core site and web application functionality. These cannot be disabled. They include our session, CSRF and Google-sign-in-state cookies, Cloudflare Turnstile (bot protection on sign-up, login, password reset, email verification and the contact form), Stripe (billing), and Iconify (the icon library used to load icons throughout the site and app).
Helps us understand how features are used so we can improve performance, fix issues faster, and prioritize what matters most to investors like you. This controls PostHog, which also records a replay of your on-screen activity (clicks, navigation, page content) on this website and, once you're signed in, inside the Moula app itself; turning this off stops PostHog from receiving your usage events, profile updates, and session replays. One exception: after a billing event (e.g. a plan change or cancellation), we still send your subscription status and favorites count/limit to PostHog even with this off, so our billing records stay accurate.
This toggle also controls Sentry, our error-monitoring tool: besides crash reports, Sentry records a session replay on a sample of visits (and on every visit where an error occurs) and, if you're signed in, receives your name and email so we can look into your report. In the EU, UK, EEA and Switzerland — and whenever we can't tell where you're visiting from — Sentry, including its replay, only starts once you turn this on; everywhere else it runs by default. Once you're signed in to the Moula app, Sentry — including session replay — always runs there to catch crashes, regardless of this toggle.
Enables Crisp, our live chat widget. On this website it loads automatically once this is on; inside the Moula app it only loads when you tap "Chat with us".
Allows us to show relevant updates and ads about Moula across platforms. These include Google Ads and Reddit pixels. If your browser sends a Global Privacy Control
signal, we treat that as an automatic opt-out and keep this off regardless of the toggle above. If you arrive via a Google or Reddit ad link, or a link carrying
campaign (UTM) parameters, we hold that information in memory and only store it in the moula_signup_utm, moula_google_click or
moula_reddit_click cookie below once you turn this on, so a later signup can still be correctly attributed.
Under CCPA, opting out means "Do Not Sell My Personal Information."
session— signs you in (httpOnly, cleared on logout)csrf— blocks cross-site form submissions (httpOnly, lasts as long as your session)google_oauth_state— anti-CSRF nonce during Google sign-in (httpOnly)moula_admin_pro_unlock— internal, admin-only preview cookie; not set for regular customer accounts (httpOnly)consent_id— links this browser to the cookie choice you make here (httpOnly, kept up to 13 months, then deleted)moula_consent_region— set on every visit from your approximate location (via Cloudflare geo), before you've made any choice, so ad-consent and banner defaults start correct (1 year,
not httpOnly)moula_signup_utm— stores UTM campaign params (utm_source/medium/campaign/term/content) from the link you arrived on, for signup attribution (30 days, not httpOnly)moula_google_click— stores Google Ads click IDs (gclid/gbraid/wbraid) for conversion attribution (30 days, not httpOnly)moula_reddit_click— stores a Reddit click ID (rdt_cid) for conversion attribution (30 days, not httpOnly)_crisp*, crisp-client*— set by Crisp (our live chat provider) once you turn Support on above; cleared automatically if you turn Support back offcookie_consent, consent_region— your saved choices above, kept in this browser's local storage (not a cookie) — separate from the moula_consent_region cookie above, which only
carries the detected region, not your toggle choicesWe also keep a server-side record of each consent choice (tied to the consent_id cookie) for up to 13 months, so we can show what you agreed to if asked.