Cookie Policy

This Cookie Policy explains how AhrensFit ("we", "us") uses cookies and similar technologies (local storage, session storage, IndexedDB) when you visit ahrensfitness.com or use the Service. It should be read alongside our Privacy Policy.

1. What these technologies are

Cookies are small text files stored on your device by your browser. Local storage and IndexedDB are related browser APIs that let a site keep data on your device between visits. We refer to all of these as "storage" below.

2. Categories we use

2.1 Strictly necessary (always on)

• Authentication session — issued by our backend (Lovable Cloud / Supabase Auth) and stored in local storage as sb-*-auth-token. Without it you cannot stay signed in. Cleared on sign-out or account deletion.
• Security tokens — short-lived CSRF / state values used during OAuth flows (Google sign-in, Strava, Oura). Deleted when the flow completes.
• UI preferences — sidebar open/closed, theme, and similar settings you set yourself. Stored locally; never sent to our servers.

These are required for the Service to function and cannot be disabled.

2.2 Functional

• Draft entries — meals or workouts you started but didn't save are kept locally so they survive a refresh.
• Onboarding progress — remembers where you left off in the onboarding wizard.

2.3 Analytics

We do not use third-party advertising or cross-site tracking cookies. We do not run Google Analytics, Meta Pixel, or similar trackers on the Service. Basic error reports (stack traces, request IDs) may be collected on the server side without cookies.

2.4 Advertising

None. We do not sell, share, or use your data for behavioral advertising.

3. Third-party integrations

When you connect a third-party service (Strava, Oura, Peloton, etc.) that provider may set its own cookies on its own domain during the OAuth handshake. Those cookies are governed by the provider's policy, not ours. We do not embed third-party tracking pixels on the Service itself.

4. Your choices

• Block or delete storage — every modern browser lets you clear cookies and local storage and block them per site. Doing so will sign you out and may break parts of the Service.
• Sign out — removes the authentication token from your device.
• Delete your account — from the You page; we erase your data on our side and you can then clear local storage on your device.
• Do Not Track — we don't use cross-site tracking, so there is nothing to honor or override beyond the strictly-necessary cookies above.

5. Changes

We may update this Cookie Policy when our storage usage changes. The "Last updated" date at the top reflects the current version. Material changes will also be announced in-app.

6. Contact

Questions? Email privacy@ahrensfitness.com.