Cookie policy
Necessary cookies
Monna Grimoire uses cookies required for the service to operate.
They may be used to maintain the sign-in session, secure account access, and remember certain preferences.
Local preferences
The site may store certain preferences locally, such as the selected display theme.
These preferences improve the user experience and are not used for advertising purposes.
Authentication
When a user signs in, cookies or session tokens may be used to recognize the account while browsing.
Payment and third-party services
When Stripe or Google OAuth are enabled, these services may use their own cookies or technical mechanisms as part of their features.
Audience measurement and optional advertising
If the user accepts optional cookies, Monna Grimoire may load the Pinterest Tag to measure visits, understand conversions, and build advertising retargeting audiences.
This tag is not loaded when optional cookies are refused. When the user is signed in, a SHA-256 hash of the user's email may be sent to Pinterest to improve conversion attribution, without sending the plain email address.
Cookie management
Users can delete cookies from their browser settings.
Deleting cookies may sign the account out or reset certain preferences.
Your private practice notebook
Seven-step progress, daily intentions, optional feelings, reflections, collections and notes are stored on this server for your account’s functionality, independently of optional audience measurement. You can edit or delete them, export your notebook as JSON, and account deletion removes them. Removing a collection keeps its notes unfiled. These entries are not public and are not sent to an AI provider. They remain until you delete them or your account. The weekly review uses saved observations and counts, not predictions or diagnoses.
Optional measurement may record a practice-completed event after saving, without its content, and estimate return visits in the week after measured sign-up. The public image-sharing tool uses only a public Moon phase and a preset intention; image generation happens in your browser. No private notebook entry is included and nothing is published automatically.
Optional first-party measurement and member feedback
If you accept optional cookies, the site records navigation steps using a random browser identifier, stored as a hash on this server. Only screen categories, event names, dates and one of the approved acquisition channels are recorded. No journal text, birth details, email or IP address is stored in these events. The identifier expires after 90 days; old server events are removed at the next collection. Refusal, withdrawal and Do Not Track stop measurement and request deletion of events associated with this browser. Measurements are not sent to another analytics provider.
The feedback form is optional and linked to your account. Your answer about subscribing stays private. A testimonial is published only with your explicit permission and admin review, under your chosen nickname or an anonymous label. Unchecking permission and saving removes publication. Account deletion also deletes your feedback. Use the cookie preferences button to change optional measurement choices.
Essential account security
When enabled, two-factor authentication uses an encrypted authenticator secret and hashed single-use recovery codes. A short-lived, HttpOnly challenge cookie completes sign-in without granting account access by itself. Security events record action categories, dates and internal account identifiers for up to 90 days, independently of optional audience measurement. These events contain no passwords, authenticator codes, email addresses or journal content.
Anti-abuse counters use hashes of technical identifiers and expire according to the relevant limit, at the next check. They protect sign-in and sensitive forms and are not advertising identifiers. You can manage two-factor authentication and revoke other sessions in your account security page.