MONOKO — COOKIE NOTICE
Last Updated: 2026-05-17 Effective Date: 1 June 2026
This Cookie Notice explains how AEDOWON SINGAPORE PTE. LTD. (UEN 202612161D), operating Monoko ("we", "us"), uses cookies, local storage, pixels, SDKs, fingerprinting, and similar tracking technologies (collectively, "Cookies") when You access or use the Monoko website (monoko.ai) and Service.
This Notice supplements our Privacy Notice and is provided in compliance with:
- EU ePrivacy Directive 2002/58/EC Art 5(3) and successor regulation
- UK Privacy and Electronic Communications Regulations 2003 (PECR)
- Thailand PDPA §24 (consent for non-essential processing)
- Singapore PDPA Openness Obligation
- CCPA / CPRA sale/sharing opt-out requirements
1. WHAT COOKIES ARE
Cookies are small text files placed on Your device when You visit a website. They allow the website to recognize Your device and remember information about Your visit (e.g., language preference, login state, items in a cart). "Cookie" in this Notice also covers:
- Local storage / sessionStorage / IndexedDB (browser-side persistent storage)
- Pixels / tracking beacons (1×1 images that log a visit)
- SDKs (mobile-app trackers)
- Device fingerprinting (passive identifier derived from browser/device attributes)
2. CATEGORIES OF COOKIES WE USE
2.1 Strictly Necessary (Always On — No Consent Required)
Required for the Service to function. Cannot be disabled.
| Cookie | Provider | Duration | Purpose |
|---|---|---|---|
monoko_session | Monoko (first-party) | Session | Maintain Your login session |
monoko_csrf | Monoko | Session | Cross-site request forgery protection |
monoko_consent | Monoko | 12 months | Remember Your cookie-consent choices |
monoko_locale | Monoko | 12 months | Remember Your language preference |
sb-* | Supabase | Session — 7 days | Authentication session (Supabase Auth) |
__vercel_* | Vercel | Session | Edge routing, deployment |
cf_* | Cloudflare | Session — 30 days | DDoS protection, bot mitigation |
polar_* and other hosted-checkout cookies (at payment) | Polar.sh (Merchant of Record) | Session or as disclosed by checkout provider | Process payment, tax, fraud checks, and 3DS or equivalent authentication |
2.2 Analytics (Consent Required — First-Party Only)
Analytics cookies help us understand how Users interact with the Service so we can improve it. Monoko operates product analytics in-house (first-party Supabase + Vercel — see Monoko-Sub-Processor-List §5); no third-party product-analytics Sub-Processor is engaged at launch. Analytics cookies are loaded only after You consent via our cookie banner.
| Cookie | Provider | Duration | Purpose |
|---|---|---|---|
monoko_analytics_* | Monoko (first-party) | 12 months | Aggregate product analytics: event tracking, funnel, retention — first-party only |
Polar's billing analytics (§2 of Monoko-Sub-Processor-List) is server-side only and does not set browser cookies on End Users.
2.3 Retargeting / Advertising Networks (Per-Network Consent Required)
Where You have opted in (via Terms §13B) to share data with advertising networks for retargeting.
| Cookie / Pixel | Provider | Duration | Purpose |
|---|---|---|---|
_fbp / Meta Pixel | Meta | 90 days | Facebook / Instagram retargeting |
_gcl_* / IDE | 13 months | Google Ads retargeting | |
_ttp / TikTok Pixel | TikTok | 13 months | TikTok Ads retargeting |
_line_oa_* | LINE | 12 months | LINE Ads retargeting |
Per-network granularity: You may consent to specific networks individually via the cookie banner or Account → Privacy → Ad-Network Sharing. Refusing one network does not refuse others.
2.4 Affiliate / KOS Attribution (Consent Required — Non-Essential)
The 90-day Affiliate / KOS attribution cookie is classified as non-essential because it serves the Affiliate's or KOS's commission rather than Your primary use of the Service.
| Cookie | Provider | Duration | Purpose |
|---|---|---|---|
monoko_aff_ref | Monoko (first-party) | 90 days | Track Affiliate referral attribution |
monoko_kos_ref | Monoko (first-party) | 90 days | Track KOS referral attribution |
If You withhold consent for attribution cookies, attribution falls back to login-based identifiers (account ID, email at signup, payment-method hash) within the same 90-day window — a privacy-preserving fingerprint fallback. This means the Affiliate or KOS who referred You can still be credited via login-time matching, but no cookie is set on Your device.
2.5 Preferences (Consent Required — Optional)
Help remember Your preferences for a smoother experience.
| Cookie | Provider | Duration | Purpose |
|---|---|---|---|
monoko_theme | Monoko | 12 months | Light / dark mode preference |
monoko_dashboard_layout | Monoko | 12 months | Dashboard widget arrangement |
3. HOW WE GET YOUR CONSENT
3.1 Cookie Banner
When You first visit monoko.ai, a cookie banner is displayed that allows You to:
- Accept all non-essential cookies (single click)
- Reject all non-essential cookies (single click — equally prominent as "Accept all")
- Customize by category (Analytics / Advertising / Attribution / Preferences — separate toggles)
Strictly necessary cookies are set without consent.
3.2 Landing-Page Banner for Referral Visits
When You arrive at the Service via an Affiliate / KOS referral link, the cookie banner is displayed before the attribution cookie is set on Your device. The attribution cookie is set only after You consent.
3.3 Per-Network Sub-Checkboxes (Advertising Networks)
For advertising-network cookies / pixels, consent is collected on a per-network basis (separate sub-checkbox per network — Meta, Google, TikTok, LINE, others). You may consent to some networks and refuse others.
3.4 Children
Where the User is under the local digital-consent age, no non-essential cookies are set without verified parental consent.
4. HOW TO CHANGE OR WITHDRAW YOUR CONSENT
You may change Your cookie preferences at any time:
(a) Via the in-app cookie preference center: Account → Privacy → Cookie Preferences (one-click rejection per category) (b) Via Your browser settings: Most browsers allow You to refuse / delete cookies. Note that disabling strictly necessary cookies will break Service functionality. (c) Via "Do Not Track" signals: We honor Global Privacy Control (GPC) and "Do Not Track" headers where legally required, treating them as opt-out signals for analytics and advertising cookies.
Withdrawing consent does not affect cookies set before withdrawal — those will be deleted at their normal expiry or when You clear Your browser. To delete cookies already set, use Your browser's "clear cookies" function.
5. THIRD-PARTY COOKIES
Some cookies above are set by third parties (Google, Meta, TikTok, LINE, Cloudflare, etc.) when You consent to their use. These third parties have their own privacy and cookie policies, which we link in our Sub-Processor List. We do not control these third parties' privacy practices.
6. DO-NOT-TRACK AND GLOBAL PRIVACY CONTROL
We honor:
- Global Privacy Control (GPC) browser signal as an opt-out request for analytics and advertising cookies, where applicable under CCPA/CPRA and analogous U.S. state laws
- "Do Not Track" (DNT) browser headers where legally required
When we detect these signals, we treat them as withdrawal of consent for non-essential cookies.
7. RETENTION
Cookie durations are listed in §2 above. After expiry, cookies are automatically deleted from Your device. Server-side records of consent (monoko_consent) are retained for duration of consent + 24 months post-withdrawal per our Privacy Notice §6.
8. CHANGES TO THIS NOTICE
We may update this Cookie Notice from time to time. The "Last Updated" date reflects the most recent change. Material changes will be notified by email and in-app banner.
9. CONTACT
DPO: dpo@monoko.ai Privacy Inquiries: privacy@monoko.ai Address: AEDOWON SINGAPORE PTE. LTD., 8 Temasek Boulevard, #17-02A, Suntec Tower Three, Singapore 038988
CONFIRMED STACK (2026-05-17)
✅ Hosting / CDN: Supabase + Vercel + Cloudflare ✅ Payment / MoR: Polar.sh (hosted checkout) + Currenxie (banking / payouts) ✅ Email: Resend (transactional + transport for in-house marketing emails) ✅ Product analytics: Monoko first-party (Supabase + Vercel) — no third-party analytics vendor at launch ✅ Cookie banner & GPC honoring: in place per §3 / §6
ℹ️ Mobile app: Monoko has no iOS / Android native app at launch. This Notice will be updated to add mobile-SDK cookies if/when native apps are released.
END OF MONOKO COOKIE NOTICE — V1 Last Updated: 2026-05-17