Cookie Policy
Last updated: 11 July 2026
The short version
We use a few cookies to keep Moola working (like keeping you signed in), and — only with your permission — some that help us understand how the product is used and measure our advertising. You're always in control: accept all, reject all, or pick and choose. Essential cookies are the only ones we use without asking.
What are cookies?
Cookies are small text files a website stores on your device. Similar technologies (local storage, pixels, SDKs) do comparable things. We use the word “cookies” throughout this policy to cover all of them. Cookies can be set by us (“first-party”) or by the services we use (“third-party”).
The cookies we use
We group cookies into three categories.
1. Strictly necessary (always on)
These make the site work — signing in, keeping your session secure, remembering your cookie choices, and tracking affiliate cashback so any cashback you're owed is credited. The affiliate cookie is used only to facilitate cashback, which the ICO confirmed (October 2024) can be treated as strictly necessary — it is not used for advertising. These can't be switched off, so we don't ask for consent for them.
| Cookie / technology | Provider | Purpose | Retention |
|---|---|---|---|
| moola.session_token | Moola (first-party) | Keeps you securely signed in. | Session / up to 30 days |
| moola_consent | Moola (first-party) | Remembers your cookie preferences so we don’t ask every visit. | Up to 13 months |
| moola_am | Moola (first-party) | Technical flag recording whether analytics may use cookies on this browser, so the right analytics mode loads instantly on your next visit. Contains no identifier. | Up to 13 months |
| Awin (dwin1.com) + awc | Awin | Affiliate cashback tracking — used only to credit the partner who referred your subscription so any cashback owed is paid. Not used for advertising. | Up to 12 months |
2. Analytics (with your consent)
These help us understand how people use Moola — which features are used, where people get stuck — so we can improve it. We don't use them to advertise to you. Our product analytics runs cookieless by default: without your consent it sets no cookies and stores nothing on your device (usage events are kept in memory for the current visit only, so every visit looks like a new anonymous session). Turning the analytics toggle on lets it use cookies so we can recognise your return visits.
| Cookie / technology | Provider | Purpose | Retention |
|---|---|---|---|
| PostHog | PostHog (EU hosting) | Product analytics — anonymous-by-default usage and feature insights. Cookieless (no cookies, no device storage) unless you consent; with consent, sets cookies/local storage so your return visits can be linked into one picture. | Up to 12 months (cookies set only with consent) |
| Sentry | Sentry | Error monitoring so we can find and fix crashes. No advertising use. | Per-error, short-lived |
3. Marketing (with your consent)
These let us measure whether our ads work and attribute sign-ups to the advertising campaign that brought you here. They may be set by, or shared with, advertising partners.
| Cookie / technology | Provider | Purpose | Retention |
|---|---|---|---|
| moola_attr | Moola (first-party) | Remembers which ad campaign referred you (Google, Meta and UTM tags) so a later sign-up is attributed correctly. The affiliate cashback identifier (awc) in this cookie is strictly necessary — see section 1. | 90 days |
| _fbp / _fbc | Meta (Facebook) | Meta Pixel — measures and attributes Facebook/Instagram ads. | Up to 3 months |
| Google Ads | Measures and attributes Google ad conversions. | Up to 90 days |
Exact cookie names and lifespans set by third parties can change; the table reflects typical behaviour at the time of writing.
Your choices
If you're in the UK or EEA, we ask for your consent before setting any analytics or marketing cookies — no cookies in those categories are set until you agree (product analytics runs cookieless until then, storing nothing on your device; marketing trackers don't run at all). You can change or withdraw your consent at any time, and it's as easy to say no as yes:
— accept all, reject all, or toggle categories individually.
You can also block or delete cookies in your browser settings. Note that blocking strictly-necessary cookies may stop parts of Moola from working (for example, staying signed in).
Third parties
The third-party services referenced above have their own privacy/cookie notices:
- PostHog — posthog.com/privacy
- Sentry — sentry.io/privacy
- Awin — awin.com privacy policy
- Meta — facebook.com cookie policy
- Google — policies.google.com
Who we are, changes & contact
Moola is operated by Moola Money Ltd, registered in England & Wales (company no. 16203199) — the data controller for the personal data described in this policy. Registered office: Silverstream House, 45 Fitzroy Street, London W1T 6EB. We are registered with the UK Information Commissioner's Office (ICO) under reference ZC122598.
We may update this policy as our product and partners change. When we make material changes we'll refresh the “last updated” date and, where required, ask for your consent again.
Questions about cookies or your data? Email us at support@moola-money.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.