Rezidomestics · Moby
Cookies and browser storage
Last updated 6 August 2026
Moby sets no analytics, advertising, profiling or cross-site tracking storage. There is no Google Analytics, no tag manager, no advertising pixel and no session-recording tool. What follows is everything the app puts in your browser.
| Name | Type | Set by | Purpose | Kept for | Category |
|---|---|---|---|---|---|
| session | Cookie | First party | Identifies the signed-in session. The session contents are held server-side; the cookie carries only a signed identifier | 24 hours from last activity | essential |
| session (CSRF token) | Cookie | First party | Carries the token that proves a form submission came from a page this site served | Life of the session | essential |
| cookie_consent | Local storage | First party | Records whether address lookup was allowed, so the question is asked once. Storing the answer to a consent question is itself exempt | Until cleared by the visitor | essential |
| scrollPosition | Session storage | First party | Returns a long list to where it was when you left it | Until the browser tab is closed | functional |
| a2hs_dismissed_* | Local storage | First party | Remembers that the “install this app” prompt was dismissed | Until cleared by the visitor | functional |
| Google Maps (NID and related) | Cookie and local storage | Set by Google when address lookup is used. Nothing is loaded from Google, and nothing is set, until address lookup is switched on | Set by Google — see Google's own cookie notice |
Address lookup
The only third party that can set anything in your browser is Google, and only through the address lookup that suggests addresses as you type one. It is switched off until you switch it on: the address field works as an ordinary text box, nothing is requested from Google, and no Google storage is set. Choosing to enable it records your choice so you are not asked again on that device.
Changing your mind
Clearing this site's data in your browser clears the record of that choice, and address lookup will ask again the next time you use an address field. Every other item above is either essential to a signed-in session or a small convenience — a scroll position, a dismissed prompt — that carries no identifier and follows you nowhere.
Connections that set nothing
Some pages load fonts and icon files from Google Fonts, jsDelivr and Cloudflare, and the push-notification pages load Firebase's messaging library from Google. None of these set a cookie or store anything, but each one does disclose your IP address to that provider in order to serve the file. We list them here because a page that only lists cookies is not an honest list of who sees you.
Full detail on who processes what is in the privacy notice and the sub-processor register.