Privacy

Last updated: 19 October 2026 (visit counting added)

The short version: what Mochi tracks stays on your computer. Only what you choose to share with friends, your sign-ups and your purchases leave it. No ads, no selling data, no tracking cookies.

Responsible for this website and the app: the developer of Mochi, reachable at Fefo.leo51@gmail.com.

The app on your computer

• Mochi notices which app or website is in front and how long, and stores your logged habits. All of this is saved only on your computer.
• It never reads what's on your screen. The optional smoking detector uses your camera only on your computer, only if you turn it on, and never saves or sends pictures.
• To check for updates, the app asks GitHub for the newest version, like any download from GitHub.

Friends (only if you use them)

• Your account (email, username, password stored as a hash) and what you choose to share (your Mochi's look, his mood and the numbers you pick in the app's privacy settings), plus messages and pokes between friends, are stored on Mochi's friends server.
• The friends server runs on Supabase, which processes this data for Mochi.
• Reason: to give you the friends features you asked for (Art. 6(1)(b) GDPR). Ask me to delete your account and this data goes with it.

Email sign-ups on this website

• If you join the waitlist, your email, what you signed up for and your browser language are stored on the same Supabase server. Nobody can read the list from outside.
• It's used only to send you the email you signed up for (the egg's Kickstarter launch, or the download link). Reason: your consent (Art. 6(1)(a) GDPR).
• Want off the list? Write to me and I'll delete it.

Buying Plus

• Payments are handled by Lemon Squeezy, the seller of every Plus purchase. They process your name, email, address and payment details under their own privacy policy. I never see your card details.
• The app sends your license key and your computer's name to Lemon Squeezy to check that Plus is active, about once a day.

This website

• It's hosted on GitHub Pages. Like every web host, GitHub sees your IP address when you visit, to deliver the page and keep it secure (GitHub's privacy statement).
• No cookies, no ads, no outside analytics companies. Fonts are loaded from this site itself, not from Google.
• To know how many people visit, each visit adds one line to Mochi's own server with the date, the page, the name of the website you came from (like reddit.com, never the full address) and whether you clicked a download. No IP address, no cookie, nothing that identifies you, and nobody can read it from outside. Reason: knowing which posts bring visitors (Art. 6(1)(f) GDPR).

Your rights

You can ask to see, correct, export or delete your data, object to how it's used, or take back your consent at any time: write to Fefo.leo51@gmail.com. You can also complain to a data protection authority, for example the one where you live.

Some services above (Supabase, GitHub, Lemon Squeezy) may process data outside the EU; they use the safeguards the GDPR requires for that, such as standard contractual clauses.