Cookies and storage on your device
Version 1.0 · published 30 October 2026
Short version: there are no advertising, analytics or tracking cookies. The platform stores on your device only what it needs to work, so no consent banner is shown. This page lists exactly what is stored, why, and for how long (ePrivacy Directive art. 5(3), "strictly necessary" exemption; GDPR Art. 13).
One third-party service does receive information, and it stores nothing on your device: usage analytics for staff accounts and adult athletes — see Usage analytics below. Athletes under 18 are not included.
What is stored
| Item | Kind | Purpose | Lifetime | Personal data? |
|---|---|---|---|---|
| Login session | browser local storage (sb-…-auth-token) |
keeps you signed in between page loads; refreshed automatically; the app signs you out after 30 minutes without activity | until sign-out or expiry | an identifier of your account — yes |
| Language and appearance | local storage | shows the app in the language and theme you chose; mirrored from your account so it follows you across devices | until you change it or sign out | no |
| Unsent form drafts | local storage (form_draft_…) |
if you close a questionnaire before submitting, your answers are kept on this device only so you can finish later. They may contain health answers (sleep, pain). Nothing is sent until you submit. | until submitted or the assignment closes | yes, on your device only |
| Drill-board drafts and view settings | local storage | keeps a coach's unsaved tactical board and preferred list view | until saved or cleared | no |
| Match plan on the bench device (staff) | browser database (IndexedDB) | lets the bench work with no network during a match: the called-up players, their shirt numbers, a small thumbnail of each one's photo, and changes not yet sent | removed two days after the match, or by hand | yes — names, numbers and photos of the called-up players, on this device only; nothing clinical or about performance |
| Notification prompt seen | local storage | remembers that you were asked once about push reminders, so you are not asked again | until sign-out | no |
| Image link cache | session storage | avoids re-requesting the same profile pictures during one visit | closes with the tab, ≤ 1 hour | no (signed links, not images) |
| Push notification subscription (athletes who opt in) | held by your browser and by the platform | delivers form reminders; the platform stores an opaque endpoint issued by your browser vendor's push service | until you turn reminders off | the endpoint is yours but carries no name; payloads are encrypted and contain no personal data |
Usage analytics (staff accounts and adult athletes)
So that we know which parts of the platform are actually used and what to build next, staff
accounts — coaches, analysts, club administrators, nutritionists and medical staff — and the
accounts of athletes aged 18 or over are measured with PostHog, hosted in the
European Union (eu.i.posthog.com).
Athletes under 18 are not measured at all, on any screen. Neither is an athlete whose date of birth is not on record: if the platform cannot tell that you are an adult, it treats you as if you were not. Measurement starts on your 18th birthday, not before.
Nothing is stored on your device for this. PostHog is configured to keep its state in memory only, so it writes no cookie and no local storage — which is why this does not change the "no consent banner" position above (ePrivacy art. 5(3) is not engaged). Your visits are linked to each other, but through your account, not your device: when you sign in, the same random code for your account is sent each time, so we can see that the same (unnamed) person came back. Nothing is linked before you sign in, or across a device you have not signed in on.
| Sent | Not sent |
|---|---|
| An identifier of your account (a random code, not your name or e-mail) | Your name, your e-mail, your photo |
| Your role, how many squads you are attached to, your language | Any athlete's name, health, wellness, medical, GPS, gym or contract data — including your own: what you answer in a form, your results, your date of birth or age |
| A one-way code standing in for your club and squad | Your club's or squad's actual identifiers |
The shape of the page you opened — e.g. /club/teams/:param/gps |
The actual web address, which is replaced before it is sent, so identifiers and any link tokens in it never leave |
| Your browser, operating system and screen size | Your IP address — it is explicitly discarded and never stored |
| Anything you typed, searched for, or uploaded |
Legal basis and your right to object. This is our legitimate interest in improving a tool your club pays for (GDPR Art. 6(1)(f)), not consent — so you do not have to agree to it, and you may object at any time under GDPR Art. 21. Open the account menu → Appearance & Language → Privacy and choose Stop measuring my usage. The choice is stored on your account, not on the device, so it applies everywhere you sign in, immediately.
What is not used
- No analytics or tracking cookies (no Google Analytics, no Vercel Analytics, no Plausible). The usage analytics described above stores nothing on your device.
- No session recording or screen replay. Your screen is never captured.
- No advertising or social-media pixels.
- No error-tracking service that would send your data to a third party.
- No fonts or scripts loaded from third parties on page load (fonts are self-hosted).
- Exercise demonstration videos are embedded from YouTube in its no-cookie mode
(
youtube-nocookie.com); a cookie is set only if you press play, under YouTube's own terms.
Your choices
Everything above is necessary for the service you asked for, so it needs no consent. You can still clear it at any time by signing out (removes the session, preferences and the prompt flag) or by clearing your browser's site data (removes everything, including unsent drafts). Push reminders are switched on and off in your account's Notifications settings.
Changes
If the platform ever needs to store anything for a purpose that is not strictly necessary, this notice will be updated first and your consent will be asked before it is stored.
Version 1.0, 30 October 2026. Part of the privacy notice of your club.