Cookie Policy
Monday Magic (Pty) Ltd ·
Registration number 2018/009467/07
Last updated: 23 July 2026
Effective from: 1 August 2026
About this Policy :
This Cookie Policy explains how Monday Magic (Pty) Ltd (“Monday Magic”, “we”, “us”, “our”) uses cookies and similar technologies on our website at mondaymagic.co and on the Monday Magic Platform.
It should be read together with our Privacy Policy and our Terms of Use.
This Policy is issued having regard to the Protection of Personal Information Act 4 of 2013 (“POPIA”) and the Electronic Communications and Transactions Act 25 of 2002 (“ECTA”).
What cookies are :
A cookie is a small text file placed on a device when a website is visited. It allows the website to recognise that device on a later visit, and to remember information about the visit.
Cookies may be:
Session cookies, which exist only for the duration of a visit and are deleted when the browser is closed; or
Persistent cookies, which remain on the device for a defined period, or until deleted.
Cookies may be set by us (first-party cookies) or by a third party whose service we use (third-party cookies).
We also use similar technologies, including local storage and pixels, which perform comparable functions. References in this Policy to cookies include those technologies.
Our approach:
The Monday Magic Platform is used predominantly on mobile devices, frequently on constrained data plans and on entry-level handsets. We have therefore kept our use of cookies to what is genuinely useful.
We use strictly necessary cookies to make the service work, functional cookies to remember preferences, and analytics cookies to understand how our website and the Platform are used so that we can improve performance over time.
We have configured our analytics so that it does not receive a User’s name, identity number, passport number or contact details. Analytics information is used in aggregate to improve the service. It is not used to build a profile of any individual User, and it is not used to make any decision about a User or their Benefits.
We do not use advertising cookies anywhere. We do not use Meta Pixel or any other social media tracking pixel, we do not permit advertising networks on our website or the Platform, and we do not sell or share data derived from cookies.
The cookies we use
1: Strictly necessary cookies (Website and Platform)
These cookies are essential. Without them the Platform cannot operate securely and Users cannot log in. They cannot be disabled through our cookie banner.
Cookie
mm_session
mm_csrf
mm_auth_state
mm_consent
mm_lb
Purpose
Maintains the User’s authenticated session after login.
Protects against cross-site request forgery attacks.
Manages the one-time PIN verification process.
Records cookie preferences so that we do not ask repeatedly.
Directs requests to the correct server.
Type
First-party, session
First-party, session
First-party, session
First-party, persistent
First-party, session
Duration
Until the browser is closed or the session expires
Until the browser is closed
15 minutes
12 months
Until the browser is closed
Lawful basis. Necessary for the performance of the service requested. Consent is not required for strictly necessary cookies.
2: Functional cookies (Website and Platform)
These cookies are essential. Without them the Platform cannot operate securely and Users cannot log in. They cannot be disabled through our cookie banner.
Cookie
mm_prefs
mm_lang
Purpose
Remembers display preferences and dismissed notices
Remembers the language preference
Type
First-party, persistent
First-party, persistent
Duration
6 months
12 months
Lawful basis. Consent.
The cookies we use
We use Google Analytics to understand how our website and the Platform are used, so that we can improve performance, fix problems, and understand which parts of the service are valued.
3: Analytics cookies (Website and Platform)
Cookie
_ga
ga<container-id>
_gid
Purpose
Distinguishes one visitor or session from another
Maintains session state for Google Analytics 4
Distinguishes visitors for daily reporting
Type
Third-party (Google LLC), persistent
Third-party (Google LLC), persistent
Third-party (Google LLC), persistent
Duration
24 months
24 months
24 months
Lawful basis. Consent. No analytics cookie is set until analytics cookies have been accepted through our cookie banner.
What we do not send. We have configured Google Analytics so that it does not receive a User’s name, identity number, passport number or contact details. We do not use analytics to build a profile of any individual User, or to make any decision about a User or their Benefits.
How we have configured it. We have enabled IP anonymisation and disabled Google Signals, advertising features, remarketing and data sharing with Google for its own purposes.
Cross-border transfer. Google Analytics is operated by Google LLC and information may be processed on servers outside South Africa. This is addressed in section 8 of our Privacy Policy and is permitted in terms of section 72 of POPIA.
Further information on Google’s practices is available at https://policies.google.com/privacy
4: C
We do not use, anywhere on our website or Platform:
Advertising or targeting cookies
Meta Pixel, or any other social media tracking pixel
Cross-site tracking cookies
Data broker or audience segmentation cookies
Fingerprinting technologies
We do not provide any analytics or advertising provider with a User’s name, identity number, passport number or contact details.
Consent
When a User first visits the Platform, a cookie banner is displayed.
The banner allows the User to:
Accept all cookies described in this Policy;
Reject all non-essential cookies, in which case only strictly necessary cookies are set; or
Manage preferences, and choose which categories to allow.
Rejecting is as easy as accepting. The banner presents both options with equal prominence. No non-essential cookie is set before the User has given consent.
Consent may be withdrawn or changed at any time by selecting Cookie settings in the footer of the Platform.
Where the User rejects functional and analytics cookies, the website and the Platform will continue to work normally. Some preferences may need to be set again on each visit.
Managing cookies through the browser
Most browsers allow cookies to be blocked or deleted through their settings. Instructions are available in the help documentation for each browser.
Blocking all cookies, including strictly necessary cookies, will prevent the Platform from functioning. Users will not be able to log in.
Deleting cookies will also delete the record of cookie preferences, and the banner will be displayed again on the next visit.
Cookies and personal information
Some cookies process information that constitutes personal information under POPIA, including IP address and device identifiers.
Where this occurs, that information is processed in accordance with our Privacy Policy, is stored within the Republic of South Africa, and is subject to the same security safeguards, retention periods and data subject rights set out in that Policy.
Data subject rights in respect of information processed through cookies may be exercised by contacting the Information Officer at support@mondaymagic.co.
Third parties
The Platform may contain links to third-party websites, including those of retailers where Benefits are redeemed.
We do not control those websites and this Policy does not apply to them. Users should review the cookie and privacy policies of any third-party website they visit.
Changes to this Policy
We may amend this Policy from time to time. The version in force is the version published on our website, and the “last updated” date reflects when it was changed.
Where an amendment introduces a new category of cookie, or a new purpose for which cookies are used, we will seek fresh consent before that cookie is set.
Contact
Information Officer :
Robyn Felicity Talbot
Registered office
Registered office
Postal address
Adress
Monday Magic (Pty) Ltd, registration number 2018/009467/07.