Cookie policy

Who provides Mondaily

Mondaily is provided by Mondaily Ltd (placeholder: the company is being registered in the United Kingdom). Company number: to be added after registration in England and Wales. Registered address: to be added after registration.

On www.mondaily.com

The website sets no cookies. It keeps these items in your browser's own storage:

• mondaily_cookies (local storage): Your answer in the privacy banner: accepted or declined. Never sent to us. Until you clear it or change your choice.
• mondaily_visitor (local storage): A random visitor id, created only after you accept, so a return visit is recognised. Until you decline or clear it.
• mondaily_campaign (session storage): The campaign tag of the link you arrived with, only after you accept. Until the tab is closed.

Analytics

Nothing is measured until you press Accept in the privacy banner. Do Not Track and Global Privacy Control always win. What is measured is described in the Privacy Policy under Website and app analytics.

In the Mondaily app (app.mondaily.com)

The app sets only the cookies it needs to keep you signed in, and keeps your settings in your browser's local storage:

• md_at: Keeps you signed in (access token). HttpOnly, Secure, SameSite=Strict, only on the app's own host. 15 minutes.
• md_rt: Renews your sign-in (refresh token). HttpOnly, Secure, SameSite=Strict, only sent to the sign-in API. 30 days.
• md_2fa_trust: Remembers a device you trusted after two-step verification. 30 days.
• md_lock: The idle screen lock. 12 hours.
• md_goa, md_gog, md_gos, md_gha, md_ghs: Protect a Google or GitHub sign-in while it is in progress (state and verifier). 10 minutes.
• md_sso: protects a company single sign-on while it is in progress. 10 minutes.