Legal
Cookie policy
yof.io sets no cookies. The yof app uses sign-in cookies only.
Company number and registered address will be added when registration in England and Wales completes. This page is in English for now. A translation is coming.
Last updated: 8 November 2026
yof is provided by Mondaily Ltd, United Kingdom. Placeholder until the company is registered: Company number: to be added after registration in England and Wales. Registered address: to be added after registration.
On yof.io
yof.io sets no cookies. It keeps these items in your browser's own storage:
- mondaily_cookies (local storage): Your answer in the privacy banner: accepted or declined. Never sent to us. Until you clear it or change your choice.
- mondaily_visitor (local storage): A random visitor id, created only after you accept, so a return visit is recognised. Until you decline or clear it.
- mondaily_campaign (session storage): The campaign tag of the link you arrived with, only after you accept. Until the tab is closed.
- yof-lang (local storage): the language you picked on yof.io. Until you clear it.
Analytics
Nothing is measured until you press Accept in the privacy banner. Do Not Track and Global Privacy Control always win. You can change your choice under Privacy choices at the bottom of every page. No advertising and no third-party trackers are used.
In the yof app (app.yof.io)
The app sets only the cookies it needs to keep you signed in:
- md_at: Keeps you signed in (access token). HttpOnly, Secure, SameSite=Strict, only on the app's own host. 15 minutes.
- md_rt: Renews your sign-in (refresh token). HttpOnly, Secure, SameSite=Strict, only sent to the sign-in API. 30 days.
- md_2fa_trust: Remembers a device you trusted after two-step verification. 30 days.
- md_lock: The idle screen lock. 12 hours.
- md_goa, md_gog, md_gos, md_gha, md_ghs, md_msa, md_msg, md_mss: Protect a Google, GitHub or Microsoft sign-in while it is in progress (state and verifier). 10 minutes.
- yof-cart-v1 and yof-rail-open (local storage): your cart and whether the side menu is open.
Why there is no cookie banner in the app
These cookies are strictly necessary to sign you in and keep your account safe, so the law does not ask for consent for them (UK PECR reg. 6(4); Directive 2002/58/EC Art. 5(3)).
Questions or problems? Email support@yof.io.