Cookie / Tracking Policy

Supabase authentication uses session cookies, typically with names beginning sb-, to maintain sign-in and support secure authentication and OAuth redirects. These are used to provide the account service you request. Their lifetime depends on session settings, token refresh, and sign-out. Blocking them can prevent sign-in or account features from working.

The time_zone cookie stores the browser’s time-zone setting for up to one year so dates, daily food logs, and reminders align with local time. The flabsolutely-theme local-storage entry remembers your selected appearance until changed or cleared. These are functional preferences, not advertising identifiers. Clear browser site data to remove them; doing so can also sign you out and reset preferences.

If you enable reminders and grant browser permission, a service worker and push subscription allow delivery of notifications. You can disable reminders in Profile and revoke notification permission through your browser or device settings.

Google sign-in and Stripe-hosted checkout or billing pages may use their own authentication, security, and other storage under their privacy notices. Their pages are separate from the Flabsolutely signup form. Review their notices when choosing those services.

The current Flabsolutely application does not include non-essential analytics cookies, advertising pixels, advertising SDKs, or cross-site advertising trackers. The in-app Analytics feature summarizes your own logged food and fitness records; it is not an advertising tracker. Operational server logs may still be processed as described in the Privacy Policy.

If we introduce non-essential tracking that requires consent, we must offer the relevant choice before activating it and explain how to withdraw that choice. Browser controls let you block or delete cookies and other site storage now. The Do Not Sell or Share page explains the current advertising-related data practices.