Your choices
Last updated: October 15, 2026.
Open Privacy choices to accept or reject optional analytics, review settings, or withdraw permission. Your choice applies to this browser; it does not automatically carry to other devices. Signing in or accepting the account terms does not enable optional analytics.
Global Privacy Control (GPC) and Do Not Track (DNT) keep optional analytics off, including when an earlier browser choice allowed it. GPC and DNT are different signals; Monibly applies this protective behavior to both. The current app controls do not enable an advertising pixel category. For other privacy requests, visit Privacy requests.
What these technologies do
Cookies are small values the browser can send with requests to the site. Local storage stays in the browser until removed; session storage is generally scoped to a tab. Browsers can restore tabs and their data. A value’s stated validity is not always the same as automatic deletion from your device.
Essential storage supports authentication, security, requested carts, appointments, and transaction recovery. Functional storage remembers appearance and feature choices. Optional first-party analytics measures coarse visits and journeys; it is not required to shop or chat.
Application browser storage and current durations| Category | Purpose | Duration or validity |
|---|
| Essential account access | Supabase sign-in/session cookies, login recovery, and short-lived account-deletion handoff cookies authenticate you and protect account actions. | Authentication SDK cookies have up to 400-day storage expiry; actual session validity, renewal, and revocation are separate and may end sooner. Recovery marker: 15 minutes. Apple deletion user marker: 10 minutes; deletion token/hint: 5 minutes. |
|---|
| Essential guest access and abuse prevention | Guest visitor identifiers, limited preview state, and verified guest-request tokens maintain a requested session and prevent repeated anonymous trials or unauthorized request access. | Some visitor identifiers have no automatic browser expiry. Public preview state is valid for 4 hours; Push guest chat has a 45-minute idle limit. Verified guest-request access is valid for up to 7 days, with browser tab storage possibly ending sooner. |
|---|
| Requested carts, drafts, and transaction recovery | Account/shop-scoped selections and request/payment identifiers allow cart, appointment, membership, and retry recovery. Confirmed orders and carts are also stored on the service. | Browser transaction-recovery records generally last for the tab session or until resolved. Public entry and customization drafts have 24-hour validity. Browser data and server order records have separate retention rules. |
|---|
| Privacy choice | monibly:analytics-choice:v1 remembers whether you allowed or rejected optional first-party analytics. It does not contain chat content. | Valid for 180 days, or until you change or clear it. Optional analytics is off when a valid permission is absent. The stored value may remain until changed or cleared. |
|---|
| Optional first-party analytics | monibly:analytics-session:v1 holds a random tab-session identifier and coarse source category for page/preview/authentication journeys after permission. | The session identifier is valid for up to 24 hours in the tab session. Rejecting removes it. Optional event records on the service are configured for 90-day retention with daily cleanup. |
|---|
| Appearance and dismissals | Theme selection and seasonal announcement preferences keep the chosen appearance and remember dismissed notices. | monibly_theme_key cookie: 365 days. Seasonal announcement cookies: 90 days. Local theme settings and dismissal mirrors may remain until you change or clear them. |
|---|
| Requested feature preferences | Music/reel mute, game audio, AI-processing permission, onboarding choices, and authorized editor preferences support the features you choose. These are not advertising profiles. | Many local preferences have no automatic expiry and remain until changed, reset by that feature, or cleared in your browser. Server-side account permissions are separate. |
|---|
Exact authentication cookie names can include a project identifier or be split into chunks by the provider. Only the features you use create their relevant storage. Browser settings or extensions may shorten the durations shown.
What optional analytics contains
Optional first-party events contain predefined event names, coarse referring-site categories, random session identifiers, and relevant page or notification references. They do not contain chat text, names, email addresses, full referrer URLs, or advertising identifiers. Authenticated events can be associated with your account; they are not necessarily anonymous. Preview continuation can link to an existing saved conversation without copying its contents.
Withdrawing permission stops future optional events and removes the optional tab-session identifier. It does not erase events already received. A browser privacy signal keeps optional analytics off while enabled; choose Reject optional if you also want a saved rejection after turning that signal off.
Operational account, order, safety, payment, and notification records are separate from optional browser analytics. Rejecting analytics does not stop records necessary to carry out the service you requested. See the Privacy Policy.
Advertising pixels and other connections
No Meta Pixel, Google Analytics/Tag Manager, or other advertising-pixel integration is enabled by this application release. This is not a claim that every external content host or separately configured hosting service is tracker-free. Any future optional tracking integration must be reviewed and connected to the appropriate privacy controls before activation.
Fonts included with this release are served by Monibly. Requested images, video, or shop media may come from Supabase or the content’s configured host, which receives connection details when loaded. Sign-in, payment, and external links can take you to other providers. The optional-analytics switch does not block these requested connections or control those providers’ independent websites.
Clear or change browser data
You can remove site cookies and storage in your browser settings. Doing so can sign you out, remove unfinished drafts, reset appearance preferences, and forget your saved privacy choice. Without a valid optional-analytics permission, analytics remains off.
Use Privacy choices to withdraw optional analytics without clearing essential account data. Browser deletion does not delete confirmed orders, server records, or your account; use Privacy requests for those matters.
Contact
Ask about cookies, consent, sale/sharing, or other privacy choices at support@monibly.app. You do not need to create an account.
Please do not send passwords, authentication codes, private tokens, payment-card details, or identity documents in your message.