Click & Fit Cookie Policy

1. Strictly necessary

• authjs.session-token (or __Secure-authjs.session-token) — keeps you signed in. Up to 30 days.
• authjs.csrf-token, authjs.callback-url — protect the sign-in and return you to the page you signed in from. Until the end of the session.
• lang — the language you chose. 1 year.
• cookie_consent (local storage) — your choice in the cookie banner. Until deleted.
• push_v2_device_key, push_v2_last_refresh (local storage) and Firebase data (IndexedDB) — only if you turn on notifications. Until deleted or until you turn notifications off.
• org (local storage) — the last Organisation you opened, to get back to it faster. Until deleted.
• gym_tv_unique_code (local storage) — only on the TV screens in gyms that show the schedule. Until deleted.

2. Analytics — only with consent

• _ga, _ga_* (Google Analytics) — anonymous statistics on which pages are visited and how the Platform is used. Up to 2 years.

Until you accept analytics cookies, Google Analytics is not loaded and nothing is sent to Google.

3. Third-party cookies

Some pages load services from other providers, which may set their own cookies under their own policies: Stripe on the payment page, Google Maps on the map of gyms, and Google and Facebook when you sign in with them.

4. How to change your choice

When you open the Platform for the first time, the banner lets you choose: accept all cookies or refuse analytics cookies.

You can change your choice at any time through “Cookie settings” at the bottom of the home page or on this page. You can also set your browser to block cookies, but then some features, such as signing in, will not work.

5. Changes

We may change this policy when we start using new cookies. The current version is always on this page.