Cookie Policy
Cookie Settings
Cookie choices are separate from email, SMS, payments, and consent for children’s information. Website analytics stay off until you allow them. Maps load independently of cookie choices; map providers receive your IP address and map request and may use their own storage. Use Cookie Settings to withdraw permission. Withdrawal stops future collection; it cannot undo information already sent. A protected browser receipt and a minimal server record keep your choices, notice version, and change history. The consent record contains no student details, raw IP address, or email address. See the Cookie Policy for storage, providers, and retention.
Last updated: October 29, 2026 · Notice version 2026.10.4
This policy covers cookies and similar browser storage used by FitLift and its hosted school websites. Essential storage supports services you request. Remembering optional display preferences and collecting website analytics require your choice. Website-builder drafts, saving and publishing remain available when optional categories are off. Maps are displayed independently of these settings. You can save a marketing cookie preference; no advertising providers are currently configured. Your choice on one school, domain, browser or device does not authorize tracking on another.
Storage and services
| Storage / service | Provider / technology | Purpose | Duration |
|---|---|---|---|
| fl_consent_<site scope> | FitLift · host-only HttpOnly cookie | Necessary: protected random receipt used to look up this browser’s choices for this website. | 180 days by default; renewed when you save. At most eight site receipts are retained per host. |
| mf:public:visitor:<site scope> | FitLift · local storage | Optional analytics: random identifier for visits on one school website. Used with page path, referring origin and campaign source/medium. No advertising pixels are configured. | Expires with the consent choice; removed on withdrawal or when an invalid/expired choice is detected. |
| mf_session | FitLift · local storage | Necessary for account sign-in and authenticated operations. | Until sign-out, removal, or session invalidation; browser storage may remain until cleared. |
| FitLift shopping cart | FitLift · local storage | Necessary to retain items you put in your shopping cart. | Until the cart is changed, cleared or browser storage is removed. |
| fl:preferences:<site scope>:language; fl:preferences:<site scope>:sidebar-collapsed | FitLift · local storage | Optional preferences: remember language and dashboard layout after permission. Scoped to this website. | Removed on withdrawal or when an invalid or expired choice is detected. |
| mf_current_location_id | FitLift · local storage | Necessary to operate in your selected workspace location. | Until replaced or browser storage is cleared. |
| Website drafts, tutorial progress and editor preferences | FitLift · local storage | Save work and preferences in tools you use, including website drafts and certificate designs. | Until replaced, reset within the tool or browser storage is cleared. |
| fl:consent:changed | FitLift · local storage | Necessary: a timestamp that tells other tabs to refresh cookie choices; contains no visitor identifier. | Overwritten on a choice change; remains until browser storage is cleared. |
| Embedded maps | Google Maps (school sites); OpenStreetMap / Nominatim (app) | Maps load when displayed, including in the dashboard and website builder previews, independently of optional cookie choices. The provider receives the IP address and requested map/address and may access its own storage. | Provider-controlled storage, if set, follows the provider’s policy. FitLift cannot delete third-party cookies. |
| Google sign-in | Google Identity Services · script and sign-in interface | Authentication on login and registration screens where Google sign-in is configured. This is separate from optional website analytics. | Provider-controlled authentication storage follows Google’s policy. |
Google’s handling of map information is described in its Privacy Policy. See also the OpenStreetMap Foundation Privacy Policy. Provider cookies vary by browser and provider configuration; this table does not assign unverified cookie names or durations to them.
Change or withdraw your choice
The banner offers Cookie Settings and Accept All Cookies where optional services are configured. Available optional settings are initially checked; previously saved choices are preserved. Open Cookie Settings from the banner, footer or app settings to choose preferences, analytics and marketing separately, then save. To turn off optional services, uncheck their settings and select Save My Choices. Optional services remain off until a current choice is confirmed by our server. Withdrawal stops future optional requests and removes FitLift’s site visitor identifier. It does not sign you out, empty your cart or hide maps. Previously transmitted information cannot be recalled through a browser setting. You can also clear storage in your browser; doing so may sign you out and cause us to ask again.
Records, expiry and privacy signals
We store a random browser receipt and a server record of the website scope, choices, policy text/version, time and change history. We do not put your email, student details, raw IP address or device fingerprint into consent records. Choices expire after 180 days by default, and changed purposes or providers require a new choice. Expired browser records and their history are removed after an additional 365 days by default. Deployment retention settings may be shorter or reflect documented retention requirements; backups follow operational retention schedules.
Global Privacy Control keeps marketing off, is recorded when you save a choice and is not overridden by Accept All. No advertising or sale/sharing integration is enabled by these controls. Cookie preferences do not grant email/SMS marketing permission, parental consent, payment authorization or permission to process biometric information.
School websites and external services
FitLift manages this technical preference mechanism. The school is responsible for its content and the student and family information it collects. Its own privacy notice may provide additional information. Google Identity Services loads on configured sign-in screens to provide authentication; Stripe checkout opens when you request payment. Those providers’ notices also apply. Merely accepting FitLift’s Terms of Service does not enable optional tracking.
For privacy requests, contact [email protected] or review our Privacy Policy.