Cookie Policy

1. What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites work, improve efficiency, and provide reporting information. Cookies can be “session” cookies (deleted when you close your browser) or “persistent” cookies (remaining on your device for a set period or until you delete them).

Similar technologies include local storage, session storage, and pixel tags. This policy covers all of these where applicable.

2. Types of Cookies We Use

2.1 Strictly Necessary Cookies

These cookies are required for the website and application to function. They cannot be disabled. They include:

• Session cookie — maintains your authenticated session after you log in to the HelloMula application. Expires when you log out or your browser session ends.
• Security token — confirms that a form you submit genuinely came from you, so another site cannot submit it on your behalf.

Legal basis: Legitimate interest (security and application functionality). These cookies cannot be opted out of without disabling core features of the Service.

2.2 Functional Cookies

These cookies enable enhanced functionality and personalization but are not strictly required. They include:

• User preferences — remembers display preferences you set within the application (e.g., view mode, date format).
• Last-viewed context — used to return you to the same section of the application you were using on a prior visit.

These cookies are set only within the authenticated application and are not used for tracking or advertising.

2.3 Analytics — and why it sets no cookies

We use Matomo to understand how people find and move through HelloMula, across both our marketing website and the application. Matomo runs on infrastructure we control — we host it ourselves rather than sending your browsing to an analytics company — so the data it collects is not shared with, sold to, or processed by a third-party advertising business.

We run Matomo in its cookieless mode. It is explicitly configured to disable cookies, so visiting any HelloMula page places no analytics cookie on your device and no persistent identifier follows you between visits. This is also why you are not asked to accept a cookie banner: there is no non-essential cookie to consent to.

What Matomo records is limited to page views and named events — which page was viewed, which link or button was used, the referring site, and coarse technical details such as browser type, device type, and a location inferred from a truncated IP address. It never records the financial values in your account. Balances, transactions, goals, and the inputs to or results of any Decision Lab analysis are not sent to analytics.

We do not use Google Analytics, Meta Pixel, or any advertising network’s analytics on either the marketing website or the application.

2.4 What We Do Not Use

• We do not use advertising or behavioral tracking cookies.
• We do not sell data collected via cookies to third parties.
• We do not use cookies to build profiles of individual users for marketing purposes.

3. Third-Party Cookies

Certain third-party services we use may place their own cookies on your device:

• Stripe — when you interact with a payment or subscription flow, Stripe may set cookies necessary for fraud detection and payment processing. These are governed by Stripe’s Privacy Policy.
• Matomo is not in this list. Our analytics is self-hosted on our own infrastructure, which makes it first-party, and it is configured to set no cookies at all. See section 2.3.

We do not embed third-party social media widgets, retargeting pixels, or ad network tags on the authenticated application.

4. Managing & Disabling Cookies

4.1 Browser Settings

Most browsers allow you to refuse cookies or delete them. You can typically find these settings in your browser’s “Privacy,” “Security,” or “Preferences” menu. Note that disabling strictly necessary cookies will prevent you from logging in to the HelloMula application.

4.2 Do Not Track

Some browsers offer a “Do Not Track” (DNT) signal. Because there is no agreed standard for DNT, we do not currently respond differently to a DNT signal. This policy applies regardless of whether DNT is enabled.

4.3 Why There Is No Cookie Banner

We do not show a cookie consent banner, and this is a consequence of the choices above rather than an omission. The only cookies HelloMula sets are the strictly necessary and functional ones described in sections 2.1 and 2.2 — the ones that keep you logged in, protect your forms, and remember your display preferences. Our analytics sets none. There is therefore no non-essential cookie for you to accept or refuse, and nothing a preference tool could switch off.

If we ever introduce a cookie that requires consent, we will add a consent mechanism before it is set, and update this policy first.

5. Cookies in the HelloMula Application

Within the authenticated application (mainapp), we use only strictly necessary and functional cookies. We do not run advertising networks, affiliate trackers, or any third-party analytics inside your authenticated session, and your financial data is not exposed to external tracking systems of any kind.

Our own self-hosted Matomo analytics does run inside the application, in the same cookieless mode described in section 2.3. It records which screens are used and which features are opened, so we can see where the product is confusing and what to improve. It does not record the contents of your account — no balances, no transactions, no goals, and none of the figures you enter into or receive from a Decision Lab analysis.

6. Changes to This Policy

We may update this Cookie Policy as our use of cookies changes or to comply with applicable law. Material changes will be communicated by updating the effective date above and, where appropriate, via the in-app notice system described in our Privacy Policy.

7. Contact

For questions about our use of cookies or to exercise privacy rights: