Cookie Policy

Cookies are small text files stored on your device when you visit a website. Similar technologies (such as local storage, pixels and SDK identifiers) work in comparable ways. Together we call them "cookies" in this policy. Cookies let a site remember your actions and preferences over time.

We group cookies into three categories. Only the first is always on; the other two depend on your choice (see Section 5).

• Necessary (always on): the sign-in session cookie (auth_token) keeps you logged in and expires when you sign out; NEXT_LOCALE remembers your interface language for up to one year; hanakoi_consent stores your cookie choices for up to 12 months. When you sign in with Google, Google may set its own cookies as part of the authentication flow, governed by Google’s privacy policy.
• Analytics (optional): Google Tag Manager and Google Analytics 4 set identifiers to measure how the Service is used — which pages are visited, session duration and feature engagement. See Section 3.
• Advertising measurement (optional): measurement tags and identifiers from Google Ads, Meta (Facebook / Instagram), TikTok and AppsFlyer that tell us which ads or campaigns led to a sign-up, subscription or purchase. See Section 4.

We do not sell data collected through cookies, and we never share the content of your messages, your characters’ replies, your display name, email address or date of birth with analytics or advertising partners.

With your consent (or, outside the regions listed in Section 5, unless you turn it off), we use Google Tag Manager and Google Analytics 4 to understand aggregate usage of the Service. What we send is limited to structural product signals — the page path visited (without query parameters), session length, how many turns a chat ran, whether a sign-up or purchase completed — together with a pseudonymous account identifier and a random event ID used to avoid counting the same event twice. Data collected is used to improve the product.

You can turn analytics off at any time on the Cookie and privacy choices page, or use the Google Analytics opt-out browser add-on.

To understand which of our campaigns bring new users, and to stop paying for ads that do not work, we may share a limited set of conversion events with the following partners when you have allowed advertising measurement:

• Google Ads (Google LLC / Google Ireland Ltd.): conversion measurement for sign-ups and purchases.
• Meta Platforms (Facebook / Instagram), including the Meta Conversions API: sign-up, trial, subscription and purchase events.
• TikTok (TikTok Pte. Ltd. / TikTok Technology Ltd.), including the TikTok Events API: sign-up, subscription and payment events.
• AppsFlyer Ltd.: mobile app install attribution and in-app conversion events.

Each event contains only the event type, a random event ID, the platform (web / iOS / Android) and, for purchases, the currency, amount and plan. Partners may combine this with their own cookies or device identifiers to attribute the event to an ad you saw, under their own privacy policies. If you deny or withdraw advertising consent, we stop loading advertising tags in your browser and our servers stop sending events about you to all four partners.

If you visit from the European Economic Area, the United Kingdom or Switzerland, optional cookies are off by default: we ask for your consent with a banner, and analytics and advertising tags stay in a "denied" state (Google Consent Mode) until you accept. In other regions optional cookies are on by default and you can turn them off.

You can change or withdraw your choice at any time, in any region, on the Cookie and privacy choices page (Settings → Cookie and privacy choices, at /settings/privacy-choices). Withdrawing consent is as easy as giving it and takes effect immediately; if you are signed in, the choice is also saved to your account so that our servers honour it. Withdrawal does not affect processing that took place before it.

You can also control cookies through your browser settings — block or delete them entirely, or block only third-party cookies. Blocking the necessary cookies described in Section 2 will break sign-in and language preference. Our analytics and advertising partners respond to browser privacy signals such as Global Privacy Control where required by law.

• Session cookies: cleared when you sign out or when the session expires.
• NEXT_LOCALE: up to 12 months, then refreshed when you use the Service again.
• hanakoi_consent: 12 months, after which we ask again.
• Google Analytics identifiers: retention is controlled in GA4 and is limited to a maximum of 14 months.
• Advertising partner identifiers: set and retained by each partner under its own policy (typically up to 13 months for browser cookies).

We may update this Cookie Policy as our use of cookies changes. The "Last updated" date above always reflects the current version. Material changes will be announced in the Service before they take effect, and where a change requires new consent we will ask for it again.

Hanakoi is operated by NGMOB PTE LTD, a company incorporated in Singapore. Questions about cookies and this policy: privacy@hanakoi.ai.