Cookie Policy
Last updated: October 15, 2026
The short version: the website uses a few cookies and similar browser storage to keep you signed in, remember your settings and your unfinished workout, block bots, measure how the site is used, process Premium payments and show ads. Where the law requires it, advertising, analytics and other non-essential cookies are only used after you give consent — and you can change your mind at any time with the button in section 5. The Android and iOS apps use no cookies, no analytics tracker and no advertising — see section 4. Premium removes advertising from the website.
1. What cookies are
Cookies are small files a website stores in your browser. "Similar technologies" include local and session storage, which work the same way. They let a site remember things between visits — for example that you are logged in, or which workout you were building. This policy explains the ones used on metalstrength.fit and sits alongside our Privacy Policy.
2. What we use, and why
| Category | Set by | Purpose |
|---|---|---|
| Essential — sign-in | Metal Strength / Supabase | Keeps you logged in by storing your session token in your browser. Required for accounts, saved workouts and history to work. |
| Essential — preferences | Metal Strength | Remembers your language, theme, light or dark mode, units, and the workout you are in the middle of building, so moving around the app does not lose it. Stored in your browser, never sent to us. |
| Security | Cloudflare (Turnstile) | Verifies that form submissions come from a human and not a bot. |
| Analytics | Google Analytics | Measures how the site is used (pages visited, sessions) so we can improve it. In the EEA, UK and Switzerland it is not even loaded until you accept the consent message: before that, nothing is sent to Google, not even a cookieless signal. |
| Product analytics | Microsoft Clarity (where enabled) | Aggregated heatmaps and anonymised replays of how pages are used, so we can fix confusing screens. Loaded only under the same consent as Google Analytics, and never records the signed-in app (your account data is masked). |
| Payments | PayPal | Set when you open PayPal checkout for a Premium subscription, to process the payment and prevent fraud. Subscriptions bought inside the apps go through the Google Play or App Store billing flow instead and use no browser cookies. |
| Advertising | Google AdSense & partners | Serve, limit, and measure ads, and (with consent) personalise them based on your visits to this and other sites. Website only. |
| Advertising measurement | Meta Pixel (Meta Platforms) | Counts visits that come from our ads on Facebook and Instagram and helps show
those ads to people likely to be interested (cookies such as _fbp).
One page view for the public page you arrive on, nothing else. In the EEA, UK and
Switzerland loaded only after you accept personalised advertising; never loaded
under a Do Not Sell or Share opt-out or GPC. Sends nothing from the signed-in app
or the sign-in pages, and is not in the apps. |
The exercise library, the training programs and the calculators all work without any non-essential cookies when you are not signed in. Our typefaces are self-hosted, so no font provider is contacted when a page loads.
3. Advertising cookies
We use Google AdSense to fund the website. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. You can opt out of personalised advertising at Google Ads Settings, and out of many other vendors at aboutads.info/choices or youronlinechoices.eu. See also how Google uses information from sites that use its services.
4. The mobile apps
The apps use no cookies and no analytics tracker. The only storage they keep for themselves is the essential kind: your sign-in session, your preferences, and working copies of your own data so the app keeps going offline (the workout in progress, finished workouts still waiting to upload, your recent history and your notes), all held on the device and removed with the app. Subscriptions are billed by Google Play or the App Store, which apply their own policies.
The apps show no ads. They contain no advertising SDK and do not read, store or share your device's advertising identifier (the Android Advertising ID, or the IDFA on iOS), for free and Premium accounts alike. Your training data, body measurements and progress photos are never shared with advertisers or used to target ads — on the website or anywhere else.
5. Your choices
Where required (EEA, UK and similar), we ask for your consent before using non-essential cookies such as analytics and advertising. You can reopen that consent message and change or withdraw your choice at any time:
The consent message is only shown in regions where consent is required, and it needs the consent script to load — if nothing opened, either your region does not require consent or a blocker is preventing it. You can still manage everything from your browser settings.
- You can block or delete cookies in your browser settings — though blocking essential cookies will stop you from staying signed in.
- You can use the opt-out links in section 3 to limit ad personalisation.
- In the United States, you can turn off ad personalisation on our Do Not Sell or Share My Personal Information page, and a browser that sends the Global Privacy Control signal is opted out automatically.
- The "Cookie settings" link in the site footer opens the same message as the button above.
6. Changes
We may update this Cookie Policy as our use of cookies changes. Updates appear here with a new "Last updated" date.
7. Contact
Questions? Email hello@metalstrength.fit.