Cookie policy
Last updated: 19 October 2026
Your privacy settings
Play videos on this site. YouTube may store information on your device.
Remember when to show the "Install the app" banner on this device.
You have not changed these settings on this device yet.
1 Who we are
Moto Together App (MTA) is operated by Dream Trough Media Ltd, trading as Moto Together App, of 46 Rosemount Avenue, Barnoldswick BB18 5JR. In this policy, "MTA", "we", "us" and "our" mean that operator. Contact us at hello@mototogether.co.uk.
This policy explains how cookies and similar technologies store information on, or access information from, your device when you use the Moto Together App, whether in a web browser or installed to your home screen. Read it alongside our Privacy Policy at /privacy, which explains how we process personal data and your rights.
2 What these technologies are
Cookies are small files stored on your device by websites. Similar technologies include local storage, IndexedDB, tracking pixels, device identifiers and software development kits (SDKs) used within apps. These technologies can store or access information even where no traditional cookie is used.
Session cookies normally expire when your browser session ends. Persistent cookies remain until their expiry date or until deleted. Local storage has no built-in expiry and remains until it is removed by us, by you or by your browser. First party technologies are set by MTA; third party technologies are set by another provider.
MTA does not set any cookies itself. Our hosting provider sets one strictly necessary cookie, and MTA uses your browser's local storage for the other items listed in section 4.
3 How we use them
The technology register in section 4 identifies what we actually use, its provider, purpose, duration and whether consent is required. A technology's category depends on what it does, not simply what its provider calls it.
Strictly necessary technologies support functions essential to services you request, such as keeping you signed in, securing password reset links and remembering your privacy choices. We do not ask for consent where a legal exception applies, but we explain their use.
Display preference technologies remember how the "Install the app" prompt should behave on your device, so it is not shown again once you have dismissed it or installed the app. We rely on the legal exception for adapting how a service appears or functions to your preferences and device. You can object to this at any time, free of charge, by switching off "Install prompt memory" in your privacy settings. If you do, we delete these items from your device and stop showing the install prompt automatically. You can still install the app from the "Install the app" option in your account menu.
Embedded video technologies are associated with YouTube videos shown on our home and welcome pages. We do not load any YouTube video until you choose to play it or switch on "Embedded videos" in your privacy settings. Declining means the video does not load; a link to watch it on YouTube is offered instead.
We do not use analytics, advertising, profiling or affiliate tracking technologies. Our hosting provider can add its own visitor analytics and error-reporting scripts to the sites it hosts. We block these on MTA, so they do not set cookies or send information about your visit. Partner deals and directory listings are ordinary links; clicking them takes you to the partner's own website. We count clicks on partner deals within our own systems without storing anything on your device. Paying for membership, viewing a deal or clicking a partner link does not by itself provide consent to any tracking.
Our emails do not contain open-tracking pixels or click tracking.
4 Technology register
4.1 Sign-in session
- Technology name and type
sb-deqjlqlmmrwvtwkzprhu-auth-token(local storage)- Provider and scope
- MTA, first party. Set by our app's sign-in system, provided through Lovable Cloud (Supabase).
- Purpose and information
- Keeps you signed in. Stores your session access and refresh tokens, your account ID and your email address.
- Duration and retention
- Written when you sign in and refreshed while you are signed in. Removed when you sign out. Sessions also end if your account is deleted. Sign-in records held on our servers are described in our Privacy Policy.
- Consent and controls
- Strictly necessary. No consent required. Cannot be switched off without stopping sign-in.
4.2 Secure link verifier
- Technology name and type
sb-deqjlqlmmrwvtwkzprhu-auth-token-code-verifier(local storage)- Provider and scope
- MTA, first party, via Lovable Cloud (Supabase).
- Purpose and information
- A one-time security code that protects email verification and password reset links from being used on another device.
- Duration and retention
- Only written when you start one of those flows. Removed once the flow completes.
- Consent and controls
- Strictly necessary. No consent required.
4.3 Privacy choices
- Technology name and type
mta-privacy-choices(local storage)- Provider and scope
- MTA, first party.
- Purpose and information
- Remembers your privacy settings (embedded videos on or off, install prompt memory on or off), the policy version and the date you chose.
- Duration and retention
- 12 months from your last choice, after which we ask again before loading embedded videos. We also keep a record of each choice on our servers (the choice, date, policy version, a random reference and, if you are signed in, your account) for up to 2 years, so we can show what you agreed to.
- Consent and controls
- Strictly necessary. No consent required. Change it at any time in your privacy settings.
4.4 Install prompt memory
- Technology name and type
mta-seen-feed,mta-install-dismissed-atandmta-installed(local storage)- Provider and scope
- MTA, first party.
- Purpose and information
- Shows the "Install the app" banner from your second visit to the feed, hides it for 30 days after you dismiss it, and hides it permanently on a device where the app is installed. Stores only a flag or the date you dismissed the banner.
- Duration and retention
- Until you clear your browser storage or switch off "Install prompt memory".
- Consent and controls
- Display preference. Relies on the exception for adapting appearance and functionality to your preferences and device. On by default; switch off at any time in your privacy settings, which deletes these items.
4.5 Embedded YouTube videos
- Technology name and type
- YouTube embedded player (www.youtube-nocookie.com), which may set local storage, IndexedDB and cookie entries, for example
yt-remote-device-id, and may read existing YouTube or Google data on your device. - Provider and scope
- Google LLC (YouTube), third party. Notices: https://policies.google.com/privacy and https://policies.google.com/technologies/cookies
- Purpose and information
- Plays Moto Gastro Adventures videos on our home and welcome pages. YouTube may store player settings and device identifiers and collect your IP address, device details and viewing activity.
- Duration and retention
- Set by Google. Some entries persist until you clear your browser storage. Google's retention is described in its privacy policy.
- Consent and controls
- Consent required. Nothing loads until you press play on a video or switch on "Embedded videos" in your privacy settings. Withdraw consent at any time in your privacy settings.
4.6 Membership payments
- Technology name and type
- Stripe Checkout and Stripe Customer Portal (hosted pages on checkout.stripe.com and billing.stripe.com)
- Provider and scope
- Stripe (Stripe Payments UK Ltd and its affiliates), third party. Notices: https://stripe.com/gb/privacy and https://stripe.com/gb/legal/cookies-policy
- Purpose and information
- When you pay for or manage your membership, you are taken to Stripe's own secure pages. Stripe sets its own cookies on its own domains for payment, security and fraud prevention.
- Duration and retention
- Set by Stripe on its own domains, as described in Stripe's cookie policy.
- Consent and controls
- Managed by Stripe on its own pages. MTA does not load any Stripe scripts or cookies on our own pages.
4.7 Hosting
- Technology name and type
__dpl(cookie)- Provider and scope
- Lovable Labs Sweden AB (Lovable), our hosting provider. First party (set on our own domain). Notice: https://lovable.dev/privacy
- Purpose and information
- Keeps your visits connected to the same version of the app while we publish updates, so pages and features load consistently. Stores a version reference, not information about you.
- Duration and retention
- Up to 7 days.
- Consent and controls
- Strictly necessary. No consent required.
We do not use any other cookies, local storage items, pixels, SDKs or device identifiers. Our fonts are hosted by us, so no font provider receives information about your visit.
5 Your choices
Your privacy settings are available at any time from the "Cookie settings" link in the footer of every page, and in the app at Account > Privacy and cookies. They let you:
- switch embedded videos on or off (off until you choose otherwise); and
- switch install prompt memory on or off.
Embedded videos remain disabled until you give consent, either by pressing play on a video or by switching them on in your settings. Choices are never preselected for consent-based technologies. Turning a setting off is as easy as turning it on.
You can use the core MTA membership service without agreeing to any optional technology. Scrolling, continuing to browse, installing the app or accepting membership terms does not count as consent.
Withdrawing consent is as easy as giving it and does not affect the lawfulness of processing carried out before withdrawal. We stop the relevant future storage, access and consent-based processing when consent is withdrawn.
Where technically possible, we remove items we control when you withdraw consent or object. We cannot remove items YouTube has already stored on your device; use your browser settings to clear them. We record your choices using mta-privacy-choices for 12 months. We request fresh consent where required, including before materially changing the purposes or providers covered by your consent.
6 Browser and device controls
Most browsers let you view, delete or block cookies and site data. Your phone or tablet may also provide privacy controls for app permissions and identifiers. Clearing or blocking site data for MTA will sign you out and reset your privacy choices.
Clearing storage, reinstalling the app or using another browser or device means you need to set your preferences again. An operating system permission does not replace any separate consent required for tracking.
7 Third parties and partner links
The register identifies third parties whose technologies operate within MTA. Their involvement does not remove our responsibility to manage the technologies used on our service.
If you follow an external link to a partner, directory listing, charity, our merch shop, social media, Google Maps or any other website, that service has its own privacy and cookie arrangements. Read its notices and use its controls. MTA consent does not automatically apply to that service, or vice versa.
8 Personal information
Information collected through these technologies may include online identifiers, device details, IP addresses and information about interactions with the service. The exact information depends on the technology and is described in the register and our Privacy Policy.
Where information is personal data, UK data protection law applies as well as the Privacy and Electronic Communications Regulations 2003 (as amended). Our Privacy Policy explains the applicable lawful bases, recipients, retention periods, any international transfers and safeguards, and how to exercise your rights. A consent exception does not remove those data protection obligations.
9 Updates and contact
We update this policy when our technologies or practices change. The latest version is available at /cookies and shows its last updated date. Updating this policy alone does not authorise new tracking that requires consent.
For questions or concerns, email hello@mototogether.co.uk or write to Dream Trough Media Ltd, 46 Rosemount Avenue, Barnoldswick BB18 5JR. You can also raise a concern with the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/.