Cookie Policy
Cookie Settings
Cookie choices are separate from email, SMS, payments, and consent for children’s information. Optional maps and website analytics stay off until you allow them. Use Cookie Settings to withdraw permission. Withdrawal stops future collection; it cannot undo information already sent. A protected browser receipt and a minimal server record keep your choices, notice version, and change history. The consent record contains no student details, raw IP address, or email address. See the Cookie Policy for storage, providers, and retention.
Last updated: October 16, 2026 · Notice version 2026.10.1
This policy covers cookies and similar browser storage used by FitLift and its hosted school websites. Essential storage supports services you request. Optional map services and school website analytics require your choice. Marketing cookies are not currently offered. Your choice on one school, domain, browser or device does not authorize tracking on another.
Storage and services
| Storage / service | Provider / technology | Purpose | Duration |
|---|---|---|---|
| fl_consent_<site scope> | FitLift · host-only HttpOnly cookie | Necessary: protected random receipt used to look up this browser’s choices for this website. | 180 days by default; renewed when you save. At most eight site receipts are retained per host. |
| mf:public:visitor:<site scope> | FitLift · local storage | Optional analytics: random identifier for visits on one school website. Used with page path, referring origin and campaign source/medium. No advertising pixels are configured. | Expires with the consent choice; removed on withdrawal or when an invalid/expired choice is detected. |
| mf_session | FitLift · local storage | Necessary for account sign-in and authenticated operations. | Until sign-out, removal, or session invalidation; browser storage may remain until cleared. |
| martialflows.commerceCart.v1 | FitLift · local storage | Necessary to retain items you put in your shopping cart. | Until the cart is changed, cleared or browser storage is removed. |
| mf_prelogin_locale; mf_current_location_id; mf:dashboard:sidebar-collapsed | FitLift · local storage | Requested language, workspace location and interface preferences. | Until replaced or browser storage is cleared. |
| Website drafts, tutorial progress and editor preferences | FitLift · local storage | Save work and preferences in tools you use, including website drafts and certificate designs. | Until replaced, reset within the tool or browser storage is cleared. |
| fl:consent:changed | FitLift · local storage | Necessary: a timestamp that tells other tabs to refresh cookie choices; contains no visitor identifier. | Overwritten on a choice change; remains until browser storage is cleared. |
| Embedded maps | Google Maps (school sites); OpenStreetMap / Nominatim (app) | Optional functional service. Only loaded after permission. The provider receives the IP address and requested map/address and may access its own storage. No map requests are sent from builder previews. | Provider-controlled storage, if set, follows the provider’s policy. FitLift cannot delete third-party cookies. |
| Google sign-in | Google Identity Services · script and sign-in interface | Authentication on login and registration screens where Google sign-in is configured. This is separate from optional website analytics. | Provider-controlled authentication storage follows Google’s policy. |
Google’s handling of map information is described in its Privacy Policy. See also the OpenStreetMap Foundation Privacy Policy. Provider cookies vary by browser and provider configuration; this table does not assign unverified cookie names or durations to them.
Change or withdraw your choice
The banner offers Cookie Settings and Accept All Cookies where optional services are configured. To reject optional services, open Cookie Settings from the banner, footer or app settings and select Reject Optional, or turn off individual categories and save. Optional services remain off until a current choice is confirmed by our server. Withdrawal stops future optional requests and removes FitLift’s site visitor identifier. It does not sign you out or empty your cart. Previously transmitted information cannot be recalled through a browser setting. You can also clear storage in your browser; doing so may sign you out and cause us to ask again.
Records, expiry and privacy signals
We store a random browser receipt and a server record of the website scope, choices, policy text/version, time and change history. We do not put your email, student details, raw IP address or device fingerprint into consent records. Choices expire after 180 days by default, and changed purposes or providers require a new choice. Expired browser records and their history are removed after an additional 365 days by default. Deployment retention settings may be shorter or reflect documented retention requirements; backups follow operational retention schedules.
Global Privacy Control is recorded when you save a choice and is not overridden by Accept All. No advertising or sale/sharing integration is enabled by these controls. Cookie preferences do not grant email/SMS marketing permission, parental consent, payment authorization or permission to process biometric information.
School websites and external services
FitLift manages this technical preference mechanism. The school is responsible for its content and the student and family information it collects. Its own privacy notice may provide additional information. Google Identity Services loads on configured sign-in screens to provide authentication; Stripe checkout opens when you request payment. Those providers’ notices also apply. Merely accepting FitLift’s Terms of Service does not enable optional tracking.
For privacy requests, contact [email protected] or review our Privacy Policy.