Cookie policy

Cookie policy

1. Who is responsible

Lodato Solutions LLC, a Delaware company, runs MovItaly and is the controller of the data described here. You can reach us at To be confirmed. This policy covers our website at movitaly.ai and the web version of the app. It explains which cookies and similar technologies (such as local storage) we really use, why, and how you can change your choice. Our servers and data are in the European Union. For everything else about your data, read the privacy policy.

2. What is stored on your device

We checked the code of the website, the web app and the server on 2026-10-21. The table lists everything we store on your device, with its category. "Necessary" means it is needed to provide the service you asked for, or to remember a choice you made; under the ePrivacy rules this does not need consent, only information. "Analytics" needs your consent.

Name	Where	Purpose	Duration	Category
consent.analytics.v1 (local storage)	Website and web app	Remembers whether you accepted or rejected analytics, and when.	About 6 months (183 days), then we ask again	Necessary
accessToken, refreshToken (browser storage)	Web app, after you sign in	Keeps you signed in.	Until you sign out or the session expires (refresh token: 7 days)	Necessary
session (cookie, first party)	Our server, only during Google or Apple sign-in	Holds the sign-in state while you are sent to the provider and back.	10 minutes	Necessary
userLanguage	Web app	Remembers the language you picked.	Until you clear your browser data	Necessary (a preference you set)
appearance	Web app	Remembers light or dark display.	Until you clear your browser data	Necessary (a preference you set)
isOnboardingCompleted and expitaly.game.seen.v1, expitaly.profile.levelSeen	Web app	Remember that you finished the first-run screens or saw a level or badge notice.	Until you clear your browser data	Necessary
ageGateBlocked	Web app	Remembers that a sign-up was turned away for age, so the form is not retried again and again. It holds no date of birth.	Until you clear your browser data	Necessary
forum_rules_accepted_v1	Web app	Remembers that you accepted the community rules on this device.	Until you clear your browser data	Necessary
chat.outbox.v1	Web app	Keeps a chat message you wrote while offline until it is sent.	Until sent or until you clear your browser data	Necessary
store.pendingUnit	Web app	Remembers which guide you were buying if you leave to pay and come back.	Until you clear your browser data	Necessary
reminders.pushPriming.v1, reminders.datesCard.skippedAt, calc.notifyMe	Web app	Remember that you dismissed a reminder prompt or asked to be notified.	Until you clear your browser data	Necessary

None of these are used for advertising or to follow you across websites. Local storage keys marked above are written by the web app only. We store no analytics identifier on your device.

Third parties. When you pay on the web you are sent to a page hosted by Stripe, which sets its own cookies under its own policy for payment security and fraud prevention. If we switch on the Cloudflare Turnstile bot check on a form, Cloudflare may read signals from your browser to tell people from bots. We name each provider in the sub-processors list. [OWNER: re-check these two against the live site before publication.]

3. Analytics

There are two different things, and we keep them apart.

Website visit counter (technical). A small script on the public website sends one page view (page path, the name of the site you came from, a campaign tag if the link has one) and, when you leave, three page-speed figures. It sets no cookie, writes nothing to your device and uses no identifier. It does not run at all if your browser sends Do Not Track or Global Privacy Control, and it is not loaded on protection and safety pages. Because it stores and reads nothing on your device and is used only for first-party statistics, we treat it as technical. It needs no banner choice, and we describe it here so that you know it exists. Like every web server, ours receives your IP address when you load a page, for delivery and security, and the counter does not store it.

Usage analytics in the app and web app (optional). Events from a fixed list are sent only after you accept in the banner or in settings. Nothing is collected before that choice. Rejecting is as easy and as visible as accepting. We do not block the site if you reject and we use no cookie wall. If your browser sends the Global Privacy Control signal we treat it as a rejection. Analytics is never active for known users aged 14 to 17 and is paused on protection and safety screens. Events never contain free text, document content, chat content or location, and raw events are deleted after 13 months.

The website has a hook for extra analytics that stays empty until a tool is added after consent. If we add one, we will name it and its storage here before it goes live.

4. Change your choice

You can change your mind at any time. Use "Cookie settings" in the footer or in the app's privacy settings to reopen the choice. You can also delete local storage and cookies in your browser settings, but you will then be signed out and asked again. If you accept or reject, we remember it for about six months and then ask again, or sooner if the categories in this policy change.

5. Native apps

The iOS and Android apps do not use cookies. They store a few settings on your device, such as your sign-in tokens, language and appearance, which are necessary for the app to work. The same analytics choice governs the optional usage events. Mobile purchases go through Apple and Google, who have their own policies.

6. Changes and contact

When we change this policy we update the version and the effective date at the top of this page. For questions, write to To be confirmed. If you think we handled your data wrongly, you can complain to the Italian data protection authority (Garante per la protezione dei dati personali) or to the authority in your own country.