On your website: the widget
The MooseChat widget sets no cookies on your website. It keeps three things in the browser’s local storage on your website’s own origin, each under a key that names your bot:
| Key | What it holds | Why |
|---|---|---|
moosechat:{bot}:visitor |
A random identifier | So a conversation continues as the visitor moves between your pages |
moosechat:{bot}:conversation |
The open conversation’s id | So the visitor sees their chat again after a page load |
moosechat:{bot}:lead |
Contact details the visitor sent that didn’t arrive | So they are sent again instead of lost; removed once delivered |
None of these is used for tracking or advertising, and none is read by anyone but MooseChat’s widget on your website. If the browser blocks storage, the widget still works; a conversation just doesn’t survive a page load.
When your bot sees an unusual flood of new chats, a visitor may be shown a Cloudflare Turnstile check before starting one. Turnstile may use its own storage to do that; see Cloudflare’s privacy policy.
In the dashboard
Signing in sets a session cookie, whose name starts with __Secure-better-auth.. It is strictly necessary: without it you can’t stay signed in. It is sent only to MooseChat, can’t be read by scripts on the page, and ends when you sign out or the session expires. Signing in with Google, or connecting an AI editor through the MCP server, may set short-lived cookies for that sign-in only.
MooseChat’s dashboard uses no advertising cookies and sets no analytics cookies. It uses PostHog to see which features are used and where people get stuck: page views, clicks and recordings of screens that hold only your own setup. PostHog keeps nothing in your browser between visits. On screens that show your visitors’ conversations, leads or questions, recording stops and only the page view is sent.
On getmoosechat.com
Our own website uses Google Analytics to count visits and see which pages and buttons lead to a free trial. Google Analytics sets cookies whose names start with _ga, which last up to two years. See Google’s privacy policy for how Google handles that data.
Signing in to the dashboard also sets moosechat_signed_in on getmoosechat.com, so the website shows “Dashboard” instead of “Sign in”. It holds no account information and is removed when you sign out.
Contact
Write to support@getmoosechat.com.