Cookie and Similar Technologies Policy

01

Current approach

Necessary authentication, security, and session data is required for account features. Analytics, performance measurement, and campaign attribution only start after explicit consent. No answer means all optional categories remain off, and the choice is asked again after one year.

02

Necessary cookies

• Supabase authentication cookies securely maintain sign-in between pages.
• Recovery and security data helps complete password and account operations safely.
• These are not used for marketing; blocking them may break sign-in and protected pages.

03

Local storage

• Language and light/dark appearance choices are stored on the device.
• Notification volume and selected sound types are stored on the device.
• When analytics consent is given, a random browser identifier is stored for anonymous page statistics: only the page path and time spent are recorded — no IP address, account, or query parameters.

04

Analytics and performance

With consent, Vercel Web Analytics and Speed Insights measure route, broad device and browser type, country, referrer, and Web Vitals. Health data, training or nutrition plans, messages, name, and email are not included in analytics events.

05

Device and product research

With separate research consent, browser-provided device brand/model, OS, screen, language, connection and performance capabilities are attached to an anonymous visit. A model hidden by the browser is not guessed. Location is separately requested and rounded to roughly 1 km. Camera, microphone, contacts, biometrics and device fingerprinting are not collected; records are deleted after 12 months.

06

Third-party choices

Named services are Google Sign-In, Supabase infrastructure, Vercel analytics and Lark/Brevo email delivery. Necessary infrastructure may run for account features; optional analytics and research only start after your choice.

07

Campaign measurement

With separate consent, UTM source, medium, and campaign name are recorded with the landing page. This shows which campaign works without creating a third-party advertising profile, precise location record, or device fingerprint.

08

Control

The cookie choice can be reopened at any time with the “Change cookie choice” link at the bottom of the site. Browser settings also let you delete or block cookies and site data, which may sign you out, reset language and theme and break some features. Anonymous visit records are deleted automatically after 12 months. Contact hello@isoclub.az with questions or objections.