01 ·About this table
A cookie is a small file a website stores in your browser. We use a few, grouped into the two categories the Privacy Policy describes: strictly necessary and analytics. This page covers the Fitquency website.
Plain English: we use cookies to keep you signed in and secure, to remember your language, and, only with your say-so, to see which features are used. No advertising cookies, ever.
02 ·Strictly necessary
These make the website work, keep your account secure, and remember choices you have made, such as your language. They are always on and do not track you.
| Cookie | Purpose | Duration | Set by |
|---|---|---|---|
session | Keeps you signed in. Holds your encrypted sign-in session; scripts on the page cannot read it. | 7 days, or 30 days if you tick “Remember me”. Renewed while you use Fitquency; deleted when you sign out. | Fitquency |
fq.org-picked | Remembers that you chose which gym or organization to work in, so you are not asked again on every page. | Until you close your browser; deleted when you sign out. | Fitquency |
_csrf | Protects the changes you make from cross-site request forgery, where another site tries to act as you. | Until you close your browser. | Fitquency |
fq.device | A random ID that is not linked to your name, used to remember your cookie-banner choice. Only a scrambled (hashed) form of it is sent to us. | 1 year. | Fitquency |
FITQUENCY_LOCALE | Remembers the language you chose for the website, so the next page is in that language. Not used for tracking. | 1 year. Set only when you choose a language. | Fitquency |
__stripe_mid, __stripe_sid | Fraud prevention. Only on the pages where a gym owner sets up payouts, which load Stripe. | 1 year (__stripe_mid); 30 minutes (__stripe_sid). | Stripe (third party) |
03 ·Analytics
These help us understand how Fitquency is used so we can fix problems and improve it. They are optional: PostHog does not load at all unless analytics is on. For signed-in members it is on by default, unless their browser sends Global Privacy Control (see §7), and can be turned off in Settings → Privacy → Product analytics; for visitors who are not signed in, and in the staff console, it is off until accepted in the cookie banner. PostHog is named in §5 of the Privacy Policy.
| Cookie | Purpose | Duration | Set by |
|---|---|---|---|
ph_<project key>_posthog | Product analytics: a pseudonymous ID for your browser and the current visit (when you are signed in, a random account ID that Fitquency can link to your account), so we can see which features are used. It never holds your name or email. If you are not signed in, it is set only after you accept analytics in the cookie banner. When you are signed in, it is set while the Product analytics switch in Settings → Privacy is on, which it is by default unless your browser sends Global Privacy Control; turning the switch off stops all capture and clears this cookie.legal-draft | 1 year. | PostHog (PostHog Cloud, US region), on our domain |
When analytics is on, PostHog may also record how you move through the website. Recordings happen on the web app only; the mobile app records no sessions. Recordings mask everything you type and all text on the screen, and never run on health, nutrition, progress or body-measurement screens.
04 ·Fitquency staff console
These are set only for Fitquency employees who sign in to our internal staff console. Members, trainers and gym owners never receive them.
| Cookie | Purpose | Duration | Set by |
|---|---|---|---|
admin_session_token | Keeps a Fitquency staff member signed in to the staff console. | 8 hours. | Fitquency |
admin_password_change_token | Lets a staff member who must change their password do only that. | 15 minutes. | Fitquency |
admin_csrf_token | Extra cross-site request forgery protection for sensitive staff actions. | 1 hour. Sent only to staff console pages. | Fitquency |
05 ·Browser storage
Some things are kept in your browser's own storage rather than in a cookie. Your browser never sends this storage to us on its own:
- Your theme (light or dark) and your display, accessibility and unit settings.
- A workout you are in the middle of, so reloading the page does not lose it.
- Reminders you have dismissed or snoozed, and tours you have finished.
- A copy of the
fq.deviceID above. - PostHog's copy of its analytics ID and the state of the current visit, under the same rule as its cookie.
06 ·What we don’t use
We don't use marketing cookies, advertising or retargeting pixels, or cross-site tracking. Our error tracking (Sentry) does not set cookies. Error reports and the other operational data described in §15 of the Privacy Policy are collected without cookies and are not covered by the analytics choice. The website and app events we store ourselves keep only a shortened IP address (the last part removed) and are deleted after 90 days.
07 ·Your choices
- Cookie banner: on our public pages, allow or decline analytics. Analytics stays off until you accept it. Strictly necessary cookies are always on. If you clear your cookies, the banner asks again.
- Signed in: product analytics is on by default, unless your browser sends Global Privacy Control (see below). Turn off Settings → Privacy → Product analytics (on the web or in the app). From then on nothing is captured and PostHog's cookie is cleared. A “no” you gave in this browser's cookie banner is honored too.
- Your browser: you can block or delete cookies in your browser's settings. Blocking strictly necessary cookies stops sign-in from working.
- Global Privacy Control: if your browser sends GPC, analytics stays off unless you turn it on yourself. If you're not signed in, or you're on our public pages (home, pricing, legal), that means turning it on in the cookie banner's choices. If you're signed in and using the app, that means switching on Settings → Privacy → Product analytics yourself. The on-by-default setting doesn't override GPC. See also §9 of the Privacy Policy.
08 ·Contact
Questions about cookies: privacy@fitquency.com.
Structural draft. Final legal prose will be reviewed by counsel before public launch. Items marked legal-draft need review before publication.