Privacy

1. Your email address, if you join the list

The signup form sends your address to MailerLite, the email service that stores the list. Your address is used to send you the free starter board, two short emails on using it, and your list code for the launch price during the first 7 days of sale. You can leave with the unsubscribe link in every email.

Reason: you asked for it by signing up. Kept until you unsubscribe or ask for it to be deleted.

The form is MOGA World’s own: it sends your address, plus the time and your IP address as proof that you signed up, straight to MailerLite, and it sets no cookies.

2. How you use the page, only if you allow it

The cookie banner has three answers. Accept all allows analytics, live chat and ads measurement. Analytics and chat only allows analytics and live chat, but no ads measurement. Essential only allows none of them. One thing runs before you answer, and keeps running if you answer Analytics and chat only or Essential only: a Google Ads counter that uses no cookies. It sends Google a signal that a page was opened or a signup happened, with ad storage, ad user data and ad personalisation denied, so Google Ads can count signups from visitors who say no. Google receives your IP address and browser details with that signal, as with any request, and handles them under its own privacy policy. No cookie and no advertising identifier is set.

Microsoft Clarity records clicks, scrolling and mouse movement, and turns them into heatmaps and session replays. It shows which parts of the page confuse people. It does not record what you type into form fields: Clarity masks them.

Reason: your consent. Nothing from Clarity or Google Analytics loads until you click Accept all or Analytics and chat only. If you click Essential only, neither ever loads.

Clarity sets cookies such as _clck and _clsk, and Microsoft cookies such as MUID. Microsoft keeps recordings for 30 days. A random sample, and recordings marked as favourites, are kept for up to 9 months. Microsoft does not let a site delete one visitor's Clarity data, so it expires on this schedule.

Google Analytics counts visits, the pages you open, the site you came from, clicks on the starter board button and which page design you saw. That shows which version of a page works better. It sets cookies named _ga and _ga_K901VSCT5S for up to 2 years. Google keeps the visit data for at most 14 months and does not store your IP address. Advertising features stay off unless you click Accept all.

If you click Accept all, the Meta Pixel from Meta Platforms Ireland records which page you visited and whether you clicked the starter board button, so MOGA World can see which ads bring visitors. It sets a cookie named _fbp for 90 days, and Meta uses the data under its own privacy policy. Google Analytics may then also report clicks on that button to MOGA World’s Google Ads account, to count which ads work. With Accept all, the Google Ads tag also counts a starter board signup or a pack purchase that came from a Google ad, and sets cookies such as _gcl_au and _gcl_aw for up to 90 days. Nothing from Meta loads before Accept all, and you can take your answer back any time under Cookie settings.

Accept all also loads the affiliate tracking tag from Impact (impact.com). It records whether you arrived through a partner’s link, so that partner can be credited if you buy, and it may set its own cookies for that. Impact uses the data under its own privacy policy. Nothing from Impact loads without Accept all either.

If you click Accept all or Analytics and chat only, the live chat from Tidio (Tidio LLC) also loads, so you can message MOGA World from any page. Tidio sets cookies and uses your browser storage to recognise you and keep the conversation, and it receives your IP address, details of your device and browser, the pages you view and whatever you type into the chat. Tidio uses the data under its own privacy policy. Reason: your consent. Nothing from Tidio loads if you click Essential only, or on the thank you pages after a purchase. If you take your answer back, the chat stops loading on the next page, and its stored data stays in your browser until you clear it.

Change your answer any time with Cookie settings at the bottom of every page.

3. Technical data when any page loads

Cloudflare hosts the site. Like any web host, it processes your IP address, your browser type and the page you asked for, to deliver the page and protect the site from attacks. Cloudflare Web Analytics counts visits without cookies. MOGA World sees totals only, never individual visitors, and keeps no logs of its own.

Reason: running a site that works and stays secure.

4. Choices saved in your own browser

On the English home page, a cookie named moga_v remembers which of two page designs you were shown, so you see the same one next time. It is set only after you click Accept all or Analytics and chat only, holds only the letter A or B and lasts 90 days. When you sign up, the list records which design you saw.

On the English one-page sample, a cookie named moga_op does the same for its two top sections, on the same terms.

If you arrive through a partner’s link, the address alone marks a purchase you make on that visit for that partner, so they can be credited. After you click Accept all, a cookie named moga_ref keeps the partner’s code for 30 days; a newer partner link replaces it. It holds only that code and is not set unless you click Accept all. The price you pay does not change.

Your language pick and your answer to the cookie question are saved in your browser (moga_lang, moga_consent). They are not sent to MOGA World. The cookie question is asked again after 12 months. Clearing your browser data removes both.

5. If you buy a pack

Stripe, the payment company, takes your payment on its own checkout page. It collects your name, email, billing address and card details. MOGA World never sees your card number. It receives your name, email, billing address, what you bought and the amount, and uses them to deliver your purchase, answer your questions, handle refunds and keep the accounting records Spanish law requires.

Reason: you bought something, and a legal duty to keep accounts. Kept for as long as the law requires those records to be kept.

6. Your website address and email, if you use the free site check

You type a website address and an email address. MOGA World reads that website’s public pages once. The report is stored for 30 days at a private link, then deleted. To keep the limit of one check per email, your email is also stored as an unreadable code that cannot be turned back into your address.

If you tick the box to get the picks by email, your address goes to MailerLite, the email service, together with your website name, the picks (up to 3) and the report link, and you get one email. Without the tick, nothing is sent to MailerLite. You can leave with the unsubscribe link in the email.

Reason: you asked for the check, and for the email only if you tick the box. The report is deleted after 30 days. The address at MailerLite is kept until you unsubscribe or ask for it to be deleted.

We read stored reports, with their pictures, to improve the check. That review sees the website address and the report, never your email, and a short note of what we learned may be kept after the report is deleted, without your email.

7. TikTok, only for MOGA World’s own account

MOGA World uses TikTok’s developer tools to send its own photo posts to its own TikTok account as drafts. On the sign-in page, the account owner approves two permissions: user.info.basic, which shows the account’s open_id and display name, and video.upload, which sends a draft to the account’s inbox. Nothing is published automatically; the owner writes the caption and posts in the TikTok app.

Visitors never sign in; the /tiktok/ page is for the owner only, and no data of other TikTok users is read or stored. The access token is kept privately by MOGA World and is never on this website. The owner can remove the connection at any time in the permissions of the TikTok app.

Reason: running our own TikTok account. Kept until the owner removes the connection.