Privacy policy

What this website collects

We use Google Analytics 4 and Google Tag Manager to understand how people use the site. They record:

• the pages you visit and how you arrived (the referring site and any campaign tags in the link);
• clicks on buttons and links, such as Copy, Play, “Mark as done” and links to GitHub or Flatkey;
• your approximate location (country and city, worked out from your IP address), device type, browser and language.

Google sets cookies (such as _ga) for this and processes the data under its own privacy policy. To opt out, use the Google Analytics opt-out add-on or block cookies in your browser.

Ads. If you arrive from one of our Google ads, the ad’s click ID (gclid, gbraid or wbraid) is kept in your browser for 90 days and added to our links to Flatkey, so a sign-up there can be credited to the ad.

Setup guide progress. The steps you mark as done are saved only in your browser’s local storage. They are never sent to us.

Tutorial video. The video is hosted on YouTube and only loads when you press Play. From then on, YouTube’s privacy policy and cookies apply.

We don’t ask for your name or email, there are no accounts or forms, and we never sell data.

The Mochi software

• Mochi runs on your own computer or server. It sends us no data and no usage statistics.
• Your bots, chats, memory, knowledge base and API keys are stored in the data folder of your install, on your disk.
• To write replies, Mochi sends messages (and images people share) to Flatkey, the model provider, which passes them to the AI model you chose. Flatkey’s own privacy policy covers that.
• Chat apps you connect (Discord, Telegram, Slack, QQ, LINE) handle messages under their own privacy policies.
• The install scripts download Node.js and Mochi from their official sources (nodejs.org or winget, and GitHub). Those sites see the download like any other.
• You stay in control: delete what the bot remembers from the dashboard, let people say “forget me” to the bot, or delete the data folder to remove everything.

Security

Please report security problems privately through GitHub’s private vulnerability reporting. If a vulnerability is found, we fix it, publish a GitHub security advisory and release, and post a notice on this site and in the README so everyone running Mochi knows to update.

Questions and changes

Questions about this policy: open an issue on GitHub. When this policy changes, we update the date at the top.