Cookie notice
Every cookie and storage item Moat.page sets, what it's for, and how long it lasts.
The short version
- Sign-in cookies keep you signed in. They're essential and can't be turned off.
- Session identifiers can't be read by scripts on the page.
- Google Analytics measures site usage in aggregate.
- Moat widgets on other sites cache public cards in the visitor's browser for up to six hours.
What we use
Cookies are small files your browser stores for a website. Moat sets cookies on .moat.page so you stay signed in across Moat's pages. All of them are sent only over HTTPS and use SameSite=Lax.
Strictly necessary cookies
These are set when you sign in and removed when you sign out. Without them, you can't use your account.
| Name | Purpose | Lasts | Readable by scripts |
|---|---|---|---|
user_key, tao_user_key | Your session identifier | 30 days | No |
email, tao_email | The verified email of the signed-in account | 30 days | No |
tao_logged_in | Records that you're signed in | 30 days | No |
tao_profile_info | Links your session to your Moat page | 30 days | No |
MOAT_logged_in | Lets pages show signed-in navigation | 30 days | Yes |
MOAT_display_name | Shows your name in navigation | 30 days | Yes |
MOAT_email | Shows your email in account menus | 30 days | Yes |
login_vars | Sign-in state from single sign-on | Until you sign out | No |
moat_signed_out | Remembers that you signed out, so you aren't signed back in automatically | 1 year | No |
moat_prefill | Carries details from a partner app into the editor | Cleared after use | No |
login_token, moat_user_profile | Sign-in for older Moat pages | Up to 1 year | No |
Analytics
| Name | Provider | Purpose | Lasts |
|---|---|---|---|
_ga, _ga_* | Google Analytics | Counts visits and pages viewed in aggregate | Up to 2 years |
Browser storage from widgets
When a website shows a Moat card, the widget stores that public card in the visitor's browser (IndexedDB database moatdb) so repeat visits load quickly. Entries expire after six hours by default, and the refresh icon clears them. When you return from editing your page to a partner app, the Go back link may be kept in session storage until you close the tab.
Your choices
You can block or delete cookies in your browser settings. If you block the strictly necessary cookies, you won't be able to sign in. You can opt out of Google Analytics with Google's browser add-on or your browser's tracking protection. Questions? Contact us.