Privacy

Privacy notice.

Last reviewed 2026-10-20

This notice explains how Sposato Fitness handles details sent through this website.

Information you provide

When you send the contact form, we store your name, email address, message, submission time, and the delivery history needed to respond. Administrator replies are retained with the contact record.

Member accounts and sign-in

For a local member account, we store your name, email address, account identifier, creation time, and a salted password hash. We do not store your password as plain text. If you choose a configured social sign-in provider, we receive your provider identifier, display name, and email address when that provider supplies one. Social access tokens are used to retrieve that profile and are not stored by this website.

Cookies and member resources

We use an encrypted, HTTP-only authentication cookie to keep you signed in. Sessions expire after 12 hours; signing out clears the relevant member or administrator sign-in state. Optional social sign-in uses temporary state and verifier cookies to protect the login flow. These authentication cookies are required for sign-in and are not used for advertising. Member planning worksheets are not saved to your account; printed or downloaded copies are under your control.

Analytics

We use Google Analytics 4 (measurement ID G-10Q3M18434) to understand aggregate site usage. Google Analytics sets first-party measurement cookies such as _ga and _ga_* and receives page-view and interaction data. We use the data only for aggregate reporting and site improvement, not for advertising profiles. You can block these cookies in your browser or use Google's Google Analytics Opt-out Browser Add-on.

How we use it

We use this information to respond to your inquiry, provide requested support, operate the website, and protect the service from abuse. We do not sell contact-form information or use it for advertising profiles.

How long we keep it

Member account records are retained while the account is maintained. Contact records are kept only as long as reasonably necessary to respond, maintain service records, or meet applicable legal obligations. You may request access to or deletion of your member account or contact-form information by contacting us using the details on the contact page.

Service providers and security

Authorized administrators can access contact records. Email delivery is handled by the configured mail provider. If you choose social sign-in, that provider processes the sign-in under its own privacy policy. Google Analytics processes site-usage data under Google's privacy policy. We use reasonable technical safeguards, but no internet transmission or storage system is completely secure.

Changes and questions

We may update this notice as the service changes. For privacy questions or requests, please contact Sposato Fitness.