Cookies Policy

1. What cookies are

Cookies are small text files placed on your device when you visit a website. They let a site remember your actions and preferences (such as staying signed in) over a period of time. "Similar technologies" include things like local storage and software development kits (SDKs) that perform comparable functions.

Cookies can be first-party (set by us) or third-party (set by a service provider), and either session cookies (deleted when you close your browser) or persistent cookies (remaining until they expire or you delete them).

2. Our approach

We keep cookies to a minimum. We use only what we need to sign you in and keep the Service secure, plus — only if you opt in — a single product-analytics tool to help us improve the Service.

We do not use advertising or marketing cookies, and we do not allow third parties to track you across other websites for advertising.

Where required by law, we ask for your consent through a cookie banner before setting any non-essential cookies. You can change your choice at any time (see section 6).

3. Cookies we use

Cookie / technology — Type — Provider — Purpose — Consent required:

• Session / authentication — Essential, session · Supabase (first-party) · Keeps you signed in and maintains your session securely · No — strictly necessary
• Security / load balancing — Essential · Cloudflare · Protects the Service against abuse and helps it load reliably · No — strictly necessary
• Cookie-preference store — Essential · First-party · Remembers your cookie choices · No — strictly necessary
• Product analytics — Optional, analytics · Mixpanel · Anonymised, aggregated usage statistics so we can improve the Service · Yes — opt-in

[CONFIRM] Verify this table before publishing. In particular, confirm the analytics provider (the current docs reference Mixpanel, while the project brief notes a possible later switch to PostHog) and confirm the exact cookie names set by Supabase and Cloudflare in your deployment.

Essential cookies cannot be switched off through our banner because the Service will not work properly without them.

4. Similar technologies

The web app may use your browser's local storage to hold non-sensitive interface preferences (for example, your light/dark theme choice on the coach dashboard and analytics screens). This stays on your device and is not used for tracking or advertising.

5. The mobile apps

The Progressor iOS and Android apps generally do not use browser cookies. Instead they use secure on-device storage to keep you signed in and to support offline session logging, and platform SDKs (such as RevenueCat for subscriptions and, where you enable them, Apple Health or Google Health Connect) to provide app features. How we handle the information collected through the apps is described in our Privacy Policy.

6. How to control cookies

You can control cookies in several ways:

• Our cookie banner. Accept or decline non-essential cookies when you first visit, and change your choice at any time via the "Cookie preferences" link in the website footer.
• Your browser. Most browsers let you block or delete cookies through their settings. Blocking essential cookies may stop you from signing in or using parts of the Service.
• Analytics opt-out. Declining analytics in our banner prevents the optional analytics cookie from being set.

7. Changes to this policy

We may update this Cookies Policy from time to time to reflect changes in the technologies we use or in the law. Where a change is material, we will give reasonable notice (for example through the cookie banner or an in-app or website notice). Your continued use of the Service after the change takes effect constitutes acceptance of the updated policy.

8. Contact

Questions about this Cookies Policy? Contact us:

NYD&Co Pty Ltd (NYD Systems)

PO BOX 5793

Studfield, Victoria, 3152

Australia

Email: privacy@progressor.app

See also our Privacy Policy and Terms of Service.