1. Your choices
Necessary technologies support security and requested functions. Optional diagnostics wait for a valid choice where required. Accept and reject controls receive equal prominence, and choices can be changed at any time.
Each explicit acceptance, rejection, or settings change creates an append-only consent record with the technology-registry version, category choices, source, server timestamp, an opaque browser-key hash, and an account association when the user is signed in. The record does not store raw search text.
2. Technology inventory
| Category | Technology | Purpose | Duration |
|---|---|---|---|
| Necessary | Moned BFF session and CSRF cookies | Authenticate requests and protect state-changing actions. | Session or configured security lifetime |
| Necessary | Role, search continuity, and video preferences | Remember an active workspace, bounded search handoff, and chosen call devices. | Session or until cleared |
| Necessary | Consent choice and opaque consent key | Remember optional diagnostics choices and associate append-only consent records without storing the raw key server-side. | Choice remains until changed or cleared; server record approximately 3 years |
| Diagnostics | First-party expert discovery measurement | Count consented profile views, shares, link copies, and booking-start intent using minimized identifiers. | Raw events up to 90 days; aggregate totals up to 13 months |
| Diagnostics | Sentry error monitoring | Diagnose client and server failures when enabled and permitted. | Provider configuration |
| User-invoked | Google Sign-In | Authenticate through Google after the user chooses that action. | Provider-controlled |
| User-invoked | Stripe and LiveKit | Provide payment or video functions when the user enters those enabled flows. | Provider-controlled |
3. User-invoked third parties
Google Sign-In loads only after a user chooses it. Stripe and LiveKit load as part of requested, enabled payment and video flows. Moned does not use advertising technology or create a marketing category when none exists.
4. Changes and contact
The inventory and consent interface must be updated together whenever a browser technology is added, removed, or reclassified. Material changes receive a new policy and technology-registry version.
Questions about browser technologies can be sent to privacy@moned.ai.