Cookie Policy — Fitterly

No advertising trackers: the public Fitterly marketing website does not currently set analytics, advertising or social-media tracking cookies. Because it only uses necessary functionality, it does not currently show a consent banner.

1. Current position

The public pages at fitterly.app do not currently set non-essential cookies. The Founder form sends the information you choose to submit directly to the Fitterly API and does not use a tracking cookie.

Secure areas such as login.fitterly.app, admin.fitterly.app and join.fitterly.app use strictly necessary session and security cookies. They cannot provide sign-in safely without them.

2. What cookies are

Cookies are small text records a website asks a browser to store. They can remember a secure session, protect a form or retain a preference. Similar browser technologies include local storage and IndexedDB, which can store larger or longer-lived information but are not cookies.

3. Cookies Fitterly uses

Name or type	Purpose	Typical duration
fitterly_session	Keeps an authenticated browser session and preserves secure navigation between requests. Strictly necessary.	Normally up to 2 hours of inactivity, subject to security settings
XSRF-TOKEN	Helps the browser and API prevent cross-site request forgery on state-changing actions. Strictly necessary.	Normally aligned with the browser session
Load-balancing or server-security cookie	May be set by hosting infrastructure if needed to route or protect a request.	Session or short-lived

Exact cookie names or durations may change when necessary to keep the service secure, but the purpose will remain substantially the same.

4. Browser and mobile local storage

Fitterly web interfaces may use browser storage for interface preferences, a selected organisation, draft state or reliable retries. The mobile app is designed with local-first foundations and may keep encrypted or access-controlled local data, an offline outbox and synchronisation metadata on the device. This allows useful work to continue during weak connectivity.

Local storage is not used to build advertising profiles. Signing out, clearing site data or removing the app may remove local copies; server records remain subject to the Privacy Notice and the relevant professional's retention responsibilities.

5. Your choices

Browsers allow you to block or delete cookies. Blocking strictly necessary cookies will prevent secure sign-in and may break invitations or form protection. Device settings can remove local app data by uninstalling the app, although offline changes not yet synchronised may then be lost.

If Fitterly introduces analytics, advertising or another non-essential browser technology, we will update this policy and request consent before setting it where required.

6. Changes and contact

The current version and effective date appear above. Questions about cookies or tracking can be sent to privacy@fitterly.app.