← Moralia

Privacy Policy

Last updated 13 September 2026

Moralia is a daily game about moral dilemmas from history: each day you're told a true story that ends at a real fork in the road, you choose one of two paths, and then you find out what history's own answer was, and how your choice compares to other players. This page explains, in plain language, what the app does with your information while you play.

What Moralia records about your answers

Your actual answer to each day's dilemma is never sent to us tied to your identity.

On your own device, your full history — which day, which dilemma, which of the two choices you picked, when, and which version of the game's calendar it was recorded under (so the app can tell a real play apart from pre-launch testing) — is kept in your browser's local storage, so the app can show you your own streak, your Journey board, and the historical figure your choices are matching.

A few small preferences and one-way flags live alongside that history, purely to control how the app behaves for you: your chosen narration voice and playback speed, your light/dark theme choice, whether you've seen the welcome screen, whether you've been offered the option to sign in yet, and whether this device is linked to a signed-in account. None of this leaves your device unless you choose to sign in.

An anonymous vote, with no connection to you at all, is recorded on our server the moment you choose: which dilemma, which of the two options, and when. This has no player id, no device id, nothing that could ever be traced back to you or to any other single person — its only purpose is to let us show every player an honest, real count of how the community actually split on that day's story, once enough votes exist. Below a certain number of votes, the app itself honestly labels this number as our own estimate, not the community, precisely so it's never a claim about real people until it actually is one.

If you sign in

Signing in is entirely optional. The game works fully, forever, without it — signing in exists only to back up your history if you get a new phone, and to let you keep your streak and your matched figure across devices.

If you do sign in (currently with Google or a one-time emailed link — Apple sign-in is planned but not yet turned on), we store, on servers hosted in the EU, a random account id created by the sign-in system itself, the date your account was created, and your answer history tied to that account id.

We do not store your name, a display name, a profile photo, or a second copy of your email address. We do not store your streak, your matched historical figure, or anything else about who you are as a person — the app works all of that out fresh, every time, from your answer history.

Google and Apple sign-in mean exactly what you'd expect: you're briefly sent to Google's or Apple's own sign-in screen, they confirm who you are, and send you back. We never see your password — we never have one to see, for any of the three sign-in methods, on purpose.

No one but you can ever read your own answer history — this is enforced by the database itself, not just by our app's own code choosing not to ask.

Usage analytics

Separately from your answer history, the app sends a small number of anonymous usage signals, to a service hosted in the EU, so we can tell whether the game is actually working for people. This is a completely separate system and never carries any of your answer history.

What is sent: that you opened the app, that you reached today's story, that you made a choice (which day, never which of the two options), that you reached the payoff screen, that you shared it, that you finished the welcome screen, that a sign-in prompt was shown or completed, and that you pressed play on a story's narration.

What is never sent: which choice you picked, the text of any dilemma, which historical figure you were matched with, your narration voice or speed, or anything you typed. Screen recording, click tracking, and location are all switched off.

Where this runs

The app itself is served by Cloudflare. Your signed-in answer history and the anonymous usage signals described above are hosted on servers in the EU.

Some stories can be read aloud. That narration is pre-generated, fixed audio, also served by Cloudflare — never a live speech service. Pressing play only fetches an audio file that already exists; nothing you've read, typed, or chosen is ever sent anywhere for that to happen.

What we never do

We never show advertising, anywhere in the app. We never sell your data, to anyone, for any reason. We never use your answers to train an AI model. We never share your answer history with another player — the community split you see is always a count, never a list. We don't design Moralia for children — see the Terms of Service for the minimum age to use it.

Deleting your data

If you'd like your account and everything tied to it deleted, contact us and we will delete your player row and your full answer history from our servers. Deleting local data on your own device is always in your own hands — clearing your browser's site data for Moralia removes everything stored there immediately.

Questions about this policy, or a deletion request: support@moralia.app. This is a plain, accurate description of what Moralia actually does — not legal advice, and not reviewed by a lawyer.