1. What Are Cookies
Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work more efficiently, provide a better user experience, and give website operators useful information.
Money Me ("we", "our", or "us") uses cookies and similar technologies on our website at money-me.com (the "Service") to ensure the Service functions correctly and to improve your experience.
2. Types of Cookies We Use
2.1 Strictly Necessary Cookies
These cookies are essential for the Service to function properly. They cannot be switched off in our systems. They are usually set in response to actions you take, such as signing in or setting your preferences.
| Cookie | Purpose | Duration |
|---|---|---|
| next-auth.session-token | Keeps you signed in as you navigate the Service. Set by NextAuth.js when you sign in. | 7 days |
| __Host-next-auth.csrf-token | Protects sign-in against cross-site request forgery (CSRF). Set by NextAuth.js. (On a non-secure connection, such as local development, it is named next-auth.csrf-token.) | Session |
| __Secure-next-auth.callback-url | Remembers the page to send you to after you sign in. Set by NextAuth.js. (Named next-auth.callback-url on a non-secure connection.) | Session |
| __Secure-next-auth.pkce.code_verifier, __Secure-next-auth.state, __Secure-next-auth.nonce | Short-lived values that protect the Google sign-in flow. Set by NextAuth.js only while you sign in with Google. | Up to 15 minutes |
| mm-twa | Set only when you open the Service from our Android app, so we can tailor the page (for example, not showing the Android app banner). | 24 hours |
2.2 Functional and Analytics Cookies
We do not set any functional, preference, analytics or advertising cookies. Your preferences (such as light or dark theme) are kept in your browser's local storage instead, as described in section 4.
2.3 Third-Party Cookies
We do not use analytics or advertising scripts. Where enabled, the sign-in, registration and email-verification pages load a bot-check script from Cloudflare (Turnstile), and Cloudflare may set its own cookies for that check. When you leave our site to use one of the other services below, that service may set its own cookies on its own website. We do not control any of these cookies:
- Cloudflare Turnstile: a bot check on the sign-in, registration and email-verification pages. See the Cloudflare Privacy Policy.
- Stripe: When you use Stripe's hosted checkout or billing pages to subscribe or manage your subscription, Stripe may set cookies to process your payment securely and prevent fraud. See the Stripe Cookie Policy.
- Google: If you sign in with Google, Google may set cookies on its own sign-in pages. See the Google Cookie Policy.
3. How to Manage Cookies
Most web browsers allow you to control cookies through their settings. You can typically:
- View what cookies are stored on your device
- Delete individual or all cookies
- Block cookies from specific or all websites
- Set your browser to notify you when a cookie is being set
Please note that blocking or deleting cookies may affect the functionality of the Service. In particular, if you block strictly necessary cookies, you will not be able to sign in or use authenticated features.
Browser-Specific Instructions
To manage cookies in your browser, follow the instructions for your specific browser:
4. Local Storage and Session Storage
In addition to cookies, the Service uses your browser's local storage (and, briefly, session storage) on your device. None of it is sent to advertisers or analytics services. It is used to:
- Remember your theme (light, dark or system) and whether the sidebar is collapsed
- Keep a copy of your account settings for faster loading
- Remember prompts and banners you have dismissed (for example the onboarding guide, page help, the install-app prompt, the notification opt-in and the Android app banner)
- Remember small display choices, such as recent searches in the command palette and whether the budget breakdown is open
- Remember that your time zone, Android app use and push notification registration have already been recorded on your device
- Keep the onboarding guide hidden for the rest of your browser tab session (session storage)
Local storage data persists until you clear it through your browser settings. Session storage data is cleared when you close the browser tab.
If you install Money Me as an app (PWA), a service worker on your device caches app files (such as scripts, styles and images) so the app loads faster. Page navigations and our API requests, which carry your financial data, always go to the network and are not cached by it.
5. Do Not Track
Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to be tracked. As Money Me does not use analytics or advertising cookies or trackers that follow you across other websites, we do not change our practices in response to DNT signals.
6. Changes to This Policy
We may update this Cookie Policy from time to time to reflect changes in the cookies we use or for other operational, legal, or regulatory reasons. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.
7. More Information
For more information about how we handle your personal data, please see our Privacy Policy.
If you have any questions about our use of cookies, please contact us at:
Email: support@money-me.com
Website: money-me.com