1. Sign-in and security
YavaFit uses Supabase authentication cookies, typically named with an sb- prefix and an auth-token suffix. Large session cookies can be split into numbered parts. They hold the session information needed to recognize you, protect member routes, and refresh your session.
These cookies are used for account functionality, rather than advertising. Their expiry follows the authentication service’s session configuration and renewal. Signing out clears the active app session; browser settings can also delete cookies. Blocking them may prevent sign-in and private features from working.
2. Browser drafts
We use sessionStorage for setup choices, unsent community text and message drafts. Drafts are associated with the current account in that browser tab; selected upload files are not preserved as text drafts.
Session storage normally lasts until the tab or browsing session ends and survives page navigation or refresh in that tab. Successful submission clears the relevant draft. Signing out clears post and message drafts. Closing the tab or clearing site data removes session drafts.
In-progress workout entries use localStorage, with an account and workout-specific key. These can remain after closing a tab or signing out, so you can resume later. Completing the workout clears its local draft; clearing site data removes any remaining device drafts. Neither action deletes records already saved to your account.
On a shared device, sign out, close your tabs and clear site data if you do not want workout drafts left on the device. A private browsing window can provide an additional separation from another person’s browser session.
3. YouTube and external media
Exercise demonstrations are embedded from youtube-nocookie.com, and some exercise thumbnails are served by YouTube. A thumbnail or player may connect to Google before you press play and disclose your IP address and browser information. Playback may involve additional storage and processing controlled by Google.
Privacy-enhanced mode limits certain personalization; it is not a guarantee of no cookies or no data collection. Read YouTube’s explanation of embedded players and Google’s privacy policy. Your browser’s third-party content and cookie settings may block videos. Written exercise instructions remain available where provided.
4. Advertising and analytics
The current app does not add advertising cookies, tracking pixels, or a separate audience analytics SDK. Hosting and infrastructure providers may process technical request logs for delivery, performance and security.
If optional tracking is introduced, this notice and the relevant choices will be updated before it is used. Essential sign-in storage is not a marketing preference.
5. Manage storage
- Use Settings → Account & security → Sign out to end your app session.
- Open your browser’s site settings for this website to inspect or delete cookies and stored site data, including persistent workout drafts.
- Use your browser’s third-party cookie or content controls to limit external video services.
- Close YavaFit tabs to discard remaining session drafts.
Clearing browser storage may sign you out and remove unsent work. It does not delete your YavaFit account, completed workouts, uploaded photos or messages. For account-wide requests, see Your choices and rights.