Cookie Policy
Effective date: 3 November 2026 · Public website version
Cookies and similar technologies used by Hello Moti
Operator: Avatud OÜ (registry code 12443197) · Viru väljak 2, 10111 Tallinn, Estonia · team@hellomoti.app
Current position. Hello Moti uses strictly necessary technologies for sign-in, security, account sessions, and payments. On the website we use one optional technology, OpenAI Ads measurement. In the EU, EEA, UK and Switzerland it is used only for visitors who arrive from an ad in ChatGPT and only if they choose "It's ok"; elsewhere it is on for website visitors without a prompt. It is never used in the iOS app or for children, and we do not use behavioural advertising.
This Cookie Policy explains how Avatud OÜ ("Avatud", "we", "us", or "our") uses cookies and similar technologies on hellomoti.app and related web applications. It should be read with our Privacy Policy.
1. What are cookies and similar technologies?
Cookies are small text files placed on a browser or device. Similar technologies include local storage, software-development-kit identifiers, pixels, and server-side tokens. They can remember a session, keep an account signed in, protect a form, prevent fraud, or complete a payment.
2. Technologies we currently use
| Category / provider | Purpose | Typical duration | Consent status |
|---|---|---|---|
| Hello Moti authentication and session | Keep the adult Account Holder signed in, connect requests to the correct account, maintain language or necessary preferences, and prevent session misuse. | Session or a limited persistent period, depending on the "remember me" setting and security configuration. | Strictly necessary. |
| Security and anti-abuse | Protect forms and APIs, detect suspicious traffic, prevent cross-site request forgery, rate-limit requests, and maintain service integrity. | Session to approximately 12 months, depending on the security control. | Strictly necessary. |
| Google and Apple sign-in | Complete adult authentication when the Account Holder chooses "Continue with Google" or "Sign in with Apple". Google or Apple may set cookies needed for account selection, security, and authentication. Sign-in with a one-time email code uses only the Hello Moti session technologies above. | Set by Google or Apple; duration depends on the provider account and browser settings. | Necessary when Google or Apple sign-in is chosen. |
| Stripe payment flow | Open and secure checkout, process payment, prevent fraud, remember the payment session, and support refunds or disputes. | Set by Stripe; session and persistent identifiers may be used under Stripe's policy. | Strictly necessary for the requested purchase. |
| Load balancing, hosting, and reliability | Route traffic, maintain uptime, prevent repeated failures, and support secure delivery of the website. | Usually session or short-lived. | Strictly necessary. |
| Your cookie choice | Remember whether you accepted or declined optional measurement (browser storage key moti.ads). | Until you change the choice or clear site data. | Strictly necessary. |
| OpenAI Ads measurement (optional) | Measure visits to the website and whether an ad in ChatGPT led an adult to visit, create an account, start the free trial, or subscribe. Loads OpenAI's measurement pixel, which sets the __oppref (ad click reference), __obref (browser reference) and __oaiq_consent (your choice) cookies; Hello Moti keeps a copy of the click reference in browser storage. | Up to 30 days. | In the EU, EEA, UK and Switzerland: consent, asked only when the visit comes from an ad in ChatGPT; off until you choose "It's ok". Elsewhere: on without a prompt. Never in the iOS app. |
Exact cookie names and durations may vary as browsers, security settings, Google, Apple, Stripe, and hosting infrastructure change. We keep the deployed cookie inventory under review and update this Policy when a change materially affects users.
3. What we do not currently use
- Advertising cookies or pixels in the iOS app, during a child's session, or, in the EU, EEA, UK and Switzerland, without your consent.
- Cross-site or cross-context behavioural tracking of children.
- Cookies used to sell or share personal data for targeted advertising. Ad measurement events are sent with an opt-out flag, so OpenAI does not use them to personalise ads.
- Optional analytics cookies at the effective date of this Policy.
If we introduce other optional analytics, product-experiment, or marketing technologies, we will identify them, explain their purpose and duration, and request consent where required before they are activated.
4. Legal basis and consent
Strictly necessary cookies are used because they are required to provide the website or feature requested by the Account Holder, protect the Service, and complete payment. They cannot generally be disabled through a consent banner without breaking the requested function.
In the EU, EEA, UK and Switzerland, OpenAI Ads measurement is based on your consent: until you choose "It's ok", the pixel is not loaded and nothing is sent to OpenAI for measurement. Elsewhere it is on for website visitors. When it is on, OpenAI receives the ad click reference, page views on hellomoti.app and, when they happen, the fact that you created an account, started the free trial, or subscribed (plan and price), together with a hashed (SHA-256) email and account identifier. No child data, voice, or session content is included. To withdraw consent, clear this site's data in your browser settings or write to team@hellomoti.app; refusing or withdrawing it does not affect the Service.
5. Children and cookies
The account and payment flow are controlled by an adult. We do not use cookies to profile a child for advertising. Necessary device and session identifiers may still be processed while a child uses a parent-authorised session because they are required to deliver and secure the Service.
6. How to control cookies
You can delete or block cookies through browser settings. Blocking necessary cookies may prevent Google or Apple sign-in, account access, secure voice sessions, or payment. Browser controls do not necessarily remove server-side records required for security, accounting, or legal compliance.
- Use the browser's privacy or site-data settings to view and delete cookies for hellomoti.app.
- Use Google Account or Apple Account settings to manage Google or Apple sign-in and their cookies.
- Use the payment page and browser controls to manage Stripe cookies, understanding that blocking them may stop checkout.
- Where a Hello Moti consent control is shown, use it to accept, reject, or change optional categories.
7. Third-party information
Major third-party information: OpenAI Privacy Policy · Google Privacy Policy · Google cookies information · Apple Privacy Policy · Stripe Privacy Policy
Third-party cookie names and retention may be controlled by those providers. We configure integrations to use the least intrusive settings reasonably available for the requested function.
8. Changes to this Policy
We may update this Policy when our cookie inventory, providers, or legal requirements change. The effective date appears at the beginning. Material changes to optional tracking will be reflected in the consent interface before the relevant technology is enabled where required by law.
9. Contact
Avatud OÜ · Registry code: 12443197 Viru väljak 2, 10111 Tallinn, Estonia Email: team@hellomoti.app · Website: https://hellomoti.app