InstamoraStart chatting

Cookie Policy

Updated 2026-11-06 · Version 1.0

What we use

Instamora uses a small number of cookies to keep you signed in and to protect the site. Browser storage remembers where you are in a conversation, for example an unsent draft. We measure how the product is used with our own first-party analytics. If you allow it, Google Analytics also counts visits to some of our public pages (see "Google Analytics" below).

We do not use advertising cookies or social media pixels, and we do not track you on other websites.

Cookies

These cookies are needed for the site to work:

  • instamora_session, set by Instamora: keeps your guest or account session, so your conversations and Credits stay with you. It is HTTP-only, so scripts on the page cannot read it. It lasts up to 90 days.
  • instamora_oauth_google, instamora_oauth_apple and instamora_oauth_email, set by Instamora: tie a sign-in with Google, Apple or an email link to the browser where it started, which protects the sign-in from being hijacked. They are sent only to our sign-in address and last 10 minutes.
  • cf_clearance, set by our security provider: shows that your browser passed a browser security check, such as the browser check described below, so the check does not run again on every request. It lasts 30 minutes.

These cookies remember the version of the site you see:

  • im_v and im_vw, set by Instamora: remember which version of Instamora we showed you, so the site looks the same when you return and our statistics count you once. They last 90 days.

This cookie remembers your cookie choice:

  • im_cookies, set by Instamora: records whether you allow Analytics in the cookie bar (see "Google Analytics" below), so the bar does not ask again. It lasts one year.

A browser security check runs when you sign in. The security provider processes the browser information needed to perform that check.

Browser storage

Instamora also keeps some data in your browser's session storage and local storage. The names of these items start with instamora.. Session storage belongs to one tab and is cleared when you close it. Local storage stays until you clear it.

In session storage:

  • unsent message drafts for each character, so a draft survives sign-in;
  • a plan you picked before signing in;
  • your match or quiz answers, so the result survives a page reload;
  • the token that connects a visit started in an app's built-in browser with your regular browser (see the Privacy Policy);
  • an analytics session ID for the tab, which changes after 30 minutes without activity.

In local storage:

  • the version of the site you see;
  • how many free messages you have left, as shown on screen;
  • small display settings, for example posts you liked, the last chat you opened, whether you have already seen an offer and whether a sign-up is in progress;
  • whether this browser was signed in when it last opened Instamora;
  • analytics events waiting to be sent to our server. We do not keep this queue in the EEA, the UK or Switzerland.

Analytics

Our own analytics are first party. For them, your browser sends events only to Instamora's own server. An event records a step such as opening a page or reviewing an offer. It never contains your messages or payment details.

In the EEA, the UK and Switzerland we record less. We skip page views and ad link details and do not issue the app-to-browser token, and your browser keeps no queue of events.

Google Analytics

We also use Google Analytics, a service of Google LLC, to see how people find Instamora. The script loads from instamora.com, your browser sends the visit to instamora.com, and our analytics delivery service passes it on to Google from its servers. Google's own scripts do not run on our pages.

Google Analytics counts visits to these public pages only: the home page, the list of characters, How it works, Pricing, FAQ, Safety and About. It does not run on any other page, including every page of the app (your chats, your account, checkout, wallet and payments) and our internal tools.

It runs only if you allow it, wherever you are. On your first visit, a cookie bar at the bottom of the page asks for your choice. "Accept" allows Analytics. "Settings" shows the kinds of cookies we use, with the Analytics box already ticked; untick it and press "Save" to keep Google Analytics off. If you have not chosen yet when you confirm that you are 18 or older, that step asks about Analytics in the same way. Until you allow Analytics, no cookie is set for Google Analytics and nothing is sent to Google, and until you choose, the bar asks again on each page you open. We keep your choice in the im_cookies cookie on instamora.com for one year and pass it to our analytics delivery service, which keeps it in the zaraz-consent cookie for one year. You can change it at any time with "Cookie settings" in the footer of our pages, and the change applies from then on.

When Google Analytics runs, Google receives:

  • the address of the page, without anything after a question mark, and its title;
  • the address of the website that sent you, without the page you came from;
  • your browser's language, screen size and user agent, which tells Google your browser and device type;
  • a random ID.

Our analytics delivery service does not pass on your IP address. Google never receives your messages or payment details.

Once you allow Google Analytics and open one of the pages it counts, our analytics delivery service sets two cookies for it on instamora.com:

  • cfz_google-analytics_v4 holds the random ID and a count of your visits. It lasts a year after the last visit Google Analytics counted.
  • cfzs_google-analytics_v4 holds the details of your current visit, which ends after 30 minutes without activity. It is deleted when you close your browser.

Our analytics delivery service also sets cf_zaraz_client on each page where it loads Zaraz, before you make any choice. The cookie is empty and holds nothing about you. It lasts a year.

Google keeps the data about each visit and each visitor for 14 months and then deletes it. Reports that only count visits can be kept longer. Google processes this data in the United States, as the Privacy Policy explains. We do not share it with Google for advertising.

Your choices

To turn Google Analytics on or off, use "Cookie settings" in the footer of our pages. If you turn it off, nothing more is sent to Google, and you can delete its cookies in your browser settings.

You can block or delete cookies and browser storage in your browser settings. If you delete instamora_session, you are signed out and lose access to any guest conversation. Without the sign-in cookies, you cannot sign in. If you delete both im_cookies and zaraz-consent, the cookie bar asks you again. If you block im_v, im_vw, im_cookies, the Google Analytics cookies or local storage, the site still works; without im_cookies the cookie bar asks on each page.

If we add cookies or storage for other purposes, we will update this page first and ask for your consent where the law requires it.

Changes

We update this page when we add or change cookies or browser storage. The date at the top shows the latest change.

Contact

Questions about cookies: privacy@instamora.com.