LEGAL
Cookie Policy
This policy describes the cookies and browser storage used on istartmonday.com, including the cached copy of your saved work.
1. Current approach
I start Monday. uses the cookies and browser storage needed to run and secure the Service, keep you signed in, remember your choices, and keep a cached copy of your saved work in your browser. We do not use advertising cookies or cross-site tracking. If you allow Analytics in the cookie banner, we use Google Analytics to count visits and see which pages are used, and we keep a first-party cookie that remembers how you found us (see the table below). Google Analytics does not load unless you allow it. Our own server also counts page views without cookies and without storing anything in your browser: each page you open sends one request to our server, which keeps the page address, the website you came from, the campaign tag of the link, the device type and browser family, and a one-way hash of your IP address and browser details that changes every day, not the address itself (see the Privacy Policy). This count does not depend on your Analytics choice. While you visit, the Service also keeps a short record of how you arrived in your browser's session storage and saves it once to your account if you create one. When you open a link that carries a creator code, the Service also sends one request to our server so the creator's visit count goes up. It carries the code, the first page, and the website you came from, and our server keeps a one-way hash of your IP address, not the address itself (see the Privacy Policy).
2. Technologies in scope
Cookies are small records a website stores in your browser. We also use local storage, session storage, and IndexedDB, a database built into your browser. IndexedDB holds a cached copy of your saved account content, including profile and document text, so the app loads quickly and keeps changes safe during short connection drops. The cache is kept separately for each account, and the app does not show it to a different account that signs in on the same browser. It stays after you sign out until you clear this site's data. Your saved work itself lives in your account, as described in the Privacy Policy.
3. What we use
| Name or type | Purpose | Category | Duration |
|---|---|---|---|
| Sign-in cookies (names starting with "sb-") | Keep you signed in and secure your session | Necessary | Until you sign out or the session expires |
| Cookie choice (ism.cookie_consent, local storage) | Remember your cookie banner choice | Necessary | Until you change it or clear site data |
| Signup agreement (ism.terms_privacy_sources_consent, local storage) | Hold your acceptance of the Terms and Privacy Policy until it is saved to your account | Necessary | Until you clear site data |
| Last sign-in email (ism.lastSignInEmail, local storage) | Suggest your account on the sign-in page and in Google's account chooser | Necessary | Until you clear site data |
| Referral or creator code (ism.referral_code and ism.referral_code_at, local storage) | Keep the code from a referral or creator link you opened, or one you typed on the sign-up page, so the bonus can be applied when you sign up | Necessary | Up to 60 days from the day the code was stored, until it is used, or until you clear site data |
| Creator visit flag (names starting with "ism.partner_click.", session storage) | Remember that your visit to a creator's link was already counted, so it is counted once per browser session | Necessary | Until you close the tab |
| Arrival record (ism.attribution_first_touch, session storage) | Remember how you arrived (the campaign tag in the link, the first page, the website you came from) until you create an account, then save it once to your account | Necessary | Until you close the tab or it is saved to your account |
| Arrival cookie (ism_first_touch) | The same record, kept so it still counts when you create an account on a later visit | Analytics | 90 days, only if you allow Analytics |
| Arrival saved (ism.attribution_synced, local storage) | Remember that your arrival record was already saved to your account, so it is not sent again | Necessary | Until you clear site data |
| Workspace cache (IndexedDB) | Cached copy of your saved work, changes waiting for the server, and the permission for your optional download folder | Necessary | Until you clear site data |
| Interface settings (local storage and session storage, most names start with "ism") | Sidebar state, onboarding hints, notification display, support-form prefill, and similar settings | Necessary | Until you clear site data; session storage ends when you close the tab |
| Google Analytics cookies (_ga and names starting with "_ga_") | Tell one visit from another so we can count visits and see which pages are used. Set on istartmonday.com by Google Analytics | Analytics | Up to 2 years, only if you allow Analytics. Removed from this browser when you turn Analytics off |
4. Consent and choices
The banner offers Accept all, Reject non-essential, and a separate Analytics choice. Necessary storage stays active because the Service cannot run securely without it. Analytics is off unless you allow it. Allowing it loads Google Analytics and lets us keep the arrival cookie above. If you turn Analytics off later, Google Analytics stops and its cookies are removed from this browser. A choice made before October 3, 2026, when Google Analytics was added, does not count as consent to it: the banner asked again. If we add another analytics tool or purpose, we will update this policy and ask again. The code from a creator or referral link is Necessary storage because it delivers the bonus you opened the link for. It does not depend on your Analytics choice.
You can change your choice at any time through the Cookie Preferences link in the site footer. You can also delete or block storage in your browser settings. Blocking necessary storage may prevent sign-in. Clearing site data removes the cached copy of your work from that browser, not from your account.
5. Consent records
When you are signed in, we also save your cookie choice to your account with its version and time, so we can apply and document it. We use this record only to honor your privacy choices, resolve disputes, and comply with law. Retention is described in the Privacy Policy.
6. Stripe, Google, and other third-party domains
When you open Stripe's hosted checkout, Google's sign-in page, or another third-party site, that party may set cookies on its own domain under its own policy. I start Monday. does not control those cookies. Google Analytics is the only third-party script on the Service. It loads from googletagmanager.com and sends data to google-analytics.com and analytics.google.com, only if you allow Analytics, and its cookies are set on istartmonday.com (see the table above). The Privacy Policy lists what it receives. We will not add other embedded third-party content to the Service without updating this policy and our consent behavior.
7. Do Not Track and Global Privacy Control
Because we do not sell or share personal information for cross-context behavioral advertising or track users across unrelated sites, browser Do Not Track and Global Privacy Control signals do not change our current practices. If those practices change, we will honor legally required opt-out signals and update this policy.
8. Changes and contact
We will update this policy when our browser-storage practices change. Material changes will have a new effective date and additional notice where required. Questions: support@istartmonday.com.
Version 2.0. Effective October 3, 2026.
Questions? Contact support@istartmonday.com.