This Cookie Policy explains how MoolKey uses cookies and similar technologies. In keeping with the rest of the product, we keep this to the bare minimum: we use no advertising or retargeting cookies.The marketing site can use Google Analytics 4 and Microsoft Clarity through Google Tag Manager when those optional tags are allowed.
What cookies are
Cookies are small text files a site stores in your browser. They let a site remember things between requests - for example, that you’re signed in. Some are essential; others are optional.
Cookies we use on MoolKey sites
Strictly necessary
These keep the hosted app working and secure. They can’t be switched off without breaking core functionality, and they store no marketing data.
- Session - keeps you authenticated as you move between pages. Cleared when you sign out.
- CSRF token - protects requests against cross-site request forgery.
Preferences
These remember choices you make to improve your experience. They’re optional and contain no personal identifiers.
- Theme preference - the
moolkey-themecookie remembers an explicit light or dark choice. It is scoped tomoolkey.comand shared by the marketing site and app, so you can keep the same theme on both without an account or extension. The browser includes it with ordinary requests to MoolKey subdomains, includingapi.moolkey.com; changing the theme does not make a separate API request. The extension currently keeps its own theme choice.
What we don’t use
- No advertising or retargeting cookies.
- No data brokers or sale of analytics data.
- No fingerprinting to identify you across sites.
Optional marketing analytics
Google Analytics 4 may use first-party analytics cookies such as_ga and a stream-specific _ga_* cookie to measure visits, navigation, content selection, free-tool usage, and clicks to the separate MoolKey app. Microsoft Clarity may use cookies or similar technology such as _clck and _clsk to understand clicks, scrolling, performance, and session behavior.
The site masks password, PIN, passphrase, identifier, breach-check, strength-check, and generated-value areas before Clarity receives them. These tools do not receive the values entered into those areas. Where consent is required, the analytics tags must remain blocked until the visitor’s applicable choice is recorded.
Managing cookies
You can control or delete cookies through your browser settings, and set most browsers to block them. If the theme cookie is blocked, the marketing site and app fall back to their own saved local preference or your system theme, so cross-site sharing will not work. Blocking strictly necessary cookies will sign you out and prevent the hosted app from functioning.
Changes to this policy
If our necessary or optional analytics technology changes, we’ll update this page and the “last updated” date above.
Contact
Questions about cookies? Email[email protected].