Cookie Policy

1. What cookies are

Cookies and similar technologies (such as browser local storage, localStorage) are small files or data that a website stores on your device to remember information. This policy explains which ones we use on spotfitr.com and in the app at app.spotfitr.com, in line with Article 22(2) of the Spanish LSSI-CE and the Spanish Data Protection Agency's Guide on the use of cookies.

2. Who is responsible

Pedro Serra Comas (Spotfitr). Contact details are in the Legal Notice. PostHog cookies belong to a third party acting as our processor.

3. Cookies we use

Technical or necessary (no consent required)

These are essential for the website and app to work, keep you signed in, remember your preferences and cookie choice, and protect the service. They are exempt from consent under Art. 22(2) LSSI-CE.

• cookie_consent (local storage; first-party): stores your cookie choice and its date. Duration: 24 months at most, after which we will ask again.
• __ph_opt_in_out_[key] (cookie or local storage; written by PostHog on our behalf): remembers whether you accepted or rejected analytics. Duration: up to 12 months.
• token (local storage; first-party; app.spotfitr.com only): keeps you signed in. Duration: until you sign out, and 7 days at most.
• i18nextLng (local storage; first-party; app.spotfitr.com only): remembers your chosen language. Duration: until you clear it.
• App cache (service worker; first-party; app.spotfitr.com only): stores the app's files so it loads faster and can be installed. Duration: until the app is updated or you clear it.
• Cloudflare security cookies (e.g. __cf_bm; third-party): Cloudflare may set them to detect automated traffic and protect the service against attacks. Duration: 30 minutes.

When you pay for the Pro plan you are redirected to Stripe's payment page (checkout.stripe.com), which uses its own cookies needed for payment and fraud prevention under Stripe's cookie policy. The same applies on Google's pages if you sign in with Google.

Analytics (only with your consent)

• PostHog (ph_[key]_posthog in a cookie and local storage; third-party, data hosted in the EU): measures page views, feature usage and events to improve the product. Duration: up to 12 months.
• PostHog session recording (uses the same identifiers; only if you accept it separately and have accepted analytics): records how the interface is used, with form fields masked, to detect problems.

Until you accept, PostHog records no events from your browser and stores no identifiers on your device.

We do not use advertising or social media cookies.

4. How to accept, reject or change your choice

On your first visit we show a banner where you can accept all cookies, reject non-essential ones or customise your choice by category. You can change or withdraw your consent at any time via the "Cookie settings" link in the footer of spotfitr.com or from your profile in the app; withdrawing is as easy as giving consent.

You can also block or delete cookies in your browser settings (Chrome, Firefox, Safari, Edge). If you block technical cookies, the app may not work properly.

5. Transfers and more information

PostHog analytics data is hosted in the European Union. For more on how we process data, your rights and international transfers, see the Privacy Policy.

6. Changes

We will update this policy if the cookies we use change. If we add cookies that require consent, we will ask you again.

This English version is a translation; in case of discrepancy, the Spanish version prevails.