Cookie Policy
Last updated: 2026-10-31
This Cookie Policy sets out the manner in which Crunch Fitness (hereinafter "we" or "us") stores and accesses information on the devices of users of crunchfit.app, including the public website and the client portal.
1. Scope
This policy applies to all pages served from crunchfit.app. It supplements, and should be read in conjunction with, our Privacy Policy available at https://crunchfit.app/privacy.
2. Categories of cookies
We use solely cookies that are strictly necessary for the provision of the website and the client portal. No cookies of any other category are used.
| Name | Purpose | Type | Duration |
|---|---|---|---|
meta-app-session | Keeps your session and sign-in on this site | Strictly necessary | 12 hours of inactivity |
XSRF-TOKEN | Protects forms against cross-site request forgery | Strictly necessary | 12 hours |
remember_web_* | Keeps you signed in, only if you tick “Keep me signed in” | Strictly necessary | Up to 400 days |
3. Description of cookies
- meta-app-session: maintains the user session for visitors and authenticated users; expires upon 12 hours of inactivity, upon termination of the browser session or upon sign out.
- XSRF-TOKEN: protects against cross-site request forgery; lifetime identical to that of meta-app-session.
- remember_web_*: set exclusively where the user selects "Keep me signed in" on the login page; retained for a period not exceeding 400 days.
4. Local storage
The user's response to the cookie banner and, in the case of authenticated users, the selected display theme are stored in the local storage of the browser. Such information is not transmitted to our servers.
5. Third-party resources
No analytics, advertising, tracking or social media cookies are used, and neither the Meta Pixel nor Google Analytics is deployed. Web fonts may be retrieved from Google Fonts (fonts.googleapis.com, fonts.gstatic.com), in which case the user's IP address is transmitted to Google. Google has stated that the Fonts API does not set cookies.
6. Consent
Strictly necessary cookies are exempt from the consent requirement under applicable ePrivacy legislation. The cookie banner is provided for information only, and declining it does not impair the functioning of the website. Prior consent will be sought before any non-essential cookie is introduced, and this policy will be amended accordingly.
7. Control of cookies
Users may block or delete cookies by means of their browser settings. Blocking strictly necessary cookies will prevent authentication to the client portal.
8. Contact
Enquiries concerning this policy may be directed to [email protected].