Cookie and Tracking Policy

Cookie Categories

• Essential cookies: authentication, CSRF, session security, logout markers, locale, and service integrity.
• Preference storage: theme, playback, local drafts, offline cache state, and product preferences.
• Analytics and performance: Vercel Analytics (our hosting provider, page views only, under the same analytics choice as below), and first-party analytics and service records that Mojo White stores in its own database. Mojo White does not use Google Analytics or Firebase Analytics. The Google Play install referrer described in the Privacy Policy is a short note from the Play store, not Google Analytics and not the Android advertising identifier.
• Advertising: the Meta Pixel and the Google Ads tag, on our marketing pages only, never on legal pages, in the Mojo White apps or in the web app. In the EU, EEA, UK, Switzerland, Quebec and Brazil they run only if you say yes. Elsewhere they run unless you turn them off with Your Privacy Choices at the bottom of every marketing page, or your browser sends Global Privacy Control. We also show the cookie banner when we cannot tell where you are. These companies may collect information about your activity on our site and across other websites over time. What they receive: Meta receives your IP address, browser information, the address of the page and of the page you came from, its own cookies (_fbp, and _fbc when you arrive from a Meta ad), a page view, and a Lead event naming which store button you tapped. Google receives your IP address, browser information, the full address of each marketing page you visit (including campaign tags and Google's ad click identifier), its own cookies (_gcl_au, and _gcl_aw when you arrive from a Google ad), and a conversion event when you tap a store button. Neither receives your name, email address, account or documents. When you turn Advertising off, the tags stop and their cookies on our site are deleted. Google's tag runs with ad personalization and analytics storage turned off.
• Security and bot-prevention storage: Turnstile tokens, abuse-prevention signals, rate-limit metadata, and session integrity checks where enabled.
• Integration storage: temporary OAuth state, import status, and provider connection data needed to connect services such as Google Drive or Dropbox.

Consent and Changing Choices

Essential cookies, security storage, anti-abuse checks, OAuth state, payment-session routing, and account-access storage are required for Mojo White to work and cannot be disabled through a cookie preference request.

Analytics: in the EU, EEA, UK, Switzerland, Quebec and Brazil, and when we cannot tell where you are, our first-party analytics (Vercel Analytics page views, our own analytics events, and the 30-day campaign cookies that remember which campaign brought you to Mojo White) run only if you turn analytics on. Elsewhere they run on our website unless you turn analytics off with Your Privacy Choices at the bottom of every marketing page or in Privacy settings; they also stay off by default while your browser sends Global Privacy Control, and inside the Mojo White apps. A choice you save always wins over the default.

Visit and campaign counts: our website counts visits using a random number kept only in the open browser tab and never in a cookie. In the EU, EEA, UK, Switzerland, Quebec and Brazil, and when we cannot tell where you are, it runs only if you turn analytics on; elsewhere it runs unless you turn analytics off with Your Privacy Choices or your browser sends Global Privacy Control. Separately, we keep daily totals per campaign of download-page views and App Store and Google Play button taps, with no cookie, no identifier and no IP address.

Advertising cookies: In the EU, EEA, UK, Switzerland, Quebec and Brazil they run only if you say yes. Elsewhere they run unless you turn them off with Your Privacy Choices at the bottom of every marketing page, or your browser sends Global Privacy Control. We also show the cookie banner when we cannot tell where you are. To change or withdraw your choice without an account, use Your Privacy Choices at the bottom of every marketing page of our website. When you turn Advertising off, the tags stop sending anything and their cookies on our site are deleted. The advertising choice is kept in your browser, so it applies to that browser only.

To opt out of non-essential analytics, email help@mojowhite.com with the subject line Cookie Opt-Out and include the account email or browser/device context needed to process the request.

Email-based opt-out requests may not disable cookies that are required for account access, security, fraud prevention, legal compliance, payments, imports, or features you request.

Opt-out handling may be browser, device, account, or provider specific. If you use Mojo White from another browser, clear cookies, use private browsing, reinstall the app, or use the service before an opt-out is processed, analytics or telemetry may still be collected.

Vendor Purposes

• WorkOS and Mojo White session storage: account access, authentication state, logout state, and session security.
• Cloudflare Turnstile: bot prevention, challenge verification, abuse control, and service integrity.
• Upstash and rate-limit storage: usage counters, abuse-prevention metadata, and request throttling.
• First-party analytics stored by Mojo White: product analytics, traffic attribution (the 30-day campaign cookies, under the analytics choice described above), conversion measurement, and feature reliability. Google Analytics and Firebase Analytics were removed on September 23, 2026.
• Vercel Analytics: traffic, performance, and reliability measurement where enabled.
• Meta Pixel (Meta Platforms): counting whether a Meta ad led to a visit and a tap on an app store button, only on marketing pages, after a yes where the cookie banner asks for one, and never with Global Privacy Control.
• Google Ads tag (Google): counting whether a Google ad led to a tap on an app store button, only on marketing pages, after a yes where the cookie banner asks for one, and never with Global Privacy Control.
• Google Drive and Dropbox OAuth state: temporary connection state and import security when a user chooses an import integration.

Retention

Cookie and analytics retention depends on the specific browser, device, provider, account setting, and configured retention period. Some cookies expire at session end, while other preference or analytics identifiers may persist for a longer configured period.

Mojo White does not place document text, prompts, generated audio, or private filenames into analytics cookies, analytics event payloads, or the signed-in service records described in the Privacy Policy. A service record can carry an internal reference number for the document, podcast, purchase, or account it is about, so it can be matched to that item. The reference is not the title, the file name, or any of the content.

The How Your Data Is Processed page explains what happens to your content, gives examples of the AI and speech services that may receive it, and describes the safeguards that apply.

Do Not Track and Global Privacy Controls

We do not respond to Do Not Track signals. Our website treats Global Privacy Control as an opt-out: while your browser sends it, the advertising tags and the website visit counter do not run. You can also email help@mojowhite.com.

Where legally required and technically supported, Mojo White will treat Global Privacy Control or a comparable recognized signal as an opt-out signal for sale/share or non-essential tracking choices.

The advertising tags on our website never load while your browser sends Global Privacy Control, even if Advertising was turned on.

Analytics Boundaries

Mojo White analytics is designed to measure product events, reliability, conversion, and aggregate behavior without storing document text, prompt content, generated audio, private filenames, or other user content in analytics payloads.

First-party interaction analytics uses stable element identifiers and redaction controls rather than raw text from user content or private UI surfaces where instrumentation is under Mojo White's control.