Cookie policy

The short version

We use one essential cookie to keep you signed in. We do not use advertising cookies. Analytics cookies and PostHog session recordings help us understand how people use Moxel and where they get stuck, including why visitors do not buy hosted servers.

Your choice

In the EU and EEA, the UK and Switzerland, we ask before setting analytics cookies or recording a session. We also ask when we cannot determine your country. Choose Accept to allow them or Decline to keep cookieless counting without recording.

Everywhere else, Accept is the default: analytics cookies and session recording start without a banner. Wherever you are, you can open Cookie settings in the footer and choose Decline to turn them off. You can choose Accept there later too.

Essential storage

Sign-in cookie (ws_session): keeps you logged in and protects your account. It is an HttpOnly cookie that lasts up to 30 days.
Your cookie choice: moxel.cookieConsent in localStorage remembers Accept or Decline so we do not ask on every page. This essential preference stays until you clear site data; it is not an analytics cookie.
Analytics opt-out: a PostHog localStorage flag can remember an account-level analytics opt-out.

Analytics after Accept

PostHog sets cookies beginning with ph_ to remember an anonymous visitor or signed-in account between pages. These analytics cookies can last up to one year. PostHog (US cloud) counts page visits and product events so we can improve Moxel.

Accept also turns on PostHog session recordings: replays of how pages are used, such as scrolling, clicks and navigation. All inputs are masked, so typing is hidden, and passwords are never recorded. We do not record account-security, sign-in or checkout pages. Session recordings are kept for up to 30 days.

For a signed-in account with an explicit age answer of 13 or over, PostHog sees the public Moxel username and plan, along with the optional age bracket and who-you-build-for answers. It never receives the account email or a display name typed elsewhere. Under-13 accounts are never recorded or tracked by the browser integration. Account opt-out, Do Not Track and Global Privacy Control also stop recording and analytics.

If you Decline or withdraw

Decline keeps cookieless counting: PostHog uses an anonymous daily identifier computed on its servers, with no analytics cookie or analytics browser storage, and no session recording. Withdrawing stops new recording and clears the PostHog analytics cookies in that browser. It does not delete events or recordings already collected; those age out under the retention periods above.

How we decide whether to ask

Our server looks up the visitor IP address in a local DB-IP Lite country database and returns only a yes/no choice-required flag to the browser. This feature does not store the country or send the IP address or country to the browser. IP geolocation by DB-IP.