Cookie Policy

1. What Are Cookies?

Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites function correctly, work more efficiently, and to provide information to the site's operators. Cookies are not harmful — they cannot execute code, carry viruses, or access information on your device beyond what they store.

In addition to traditional cookies, we and our third-party partners may also use similar tracking technologies, including local storage tokens and session storage, which function in a comparable way. This policy covers all such technologies collectively referred to as "cookies".

2. How We Use Cookies

MotionLab uses three categories of cookies:

Essential Cookies — cannot be disabled

These cookies are strictly necessary for the Service to function and cannot be switched off. They include:

• Authentication session token: maintains your logged-in state across pages and sessions, so you do not need to sign in repeatedly.
• Supabase Auth token: a secure token issued by Supabase Auth that validates your identity when making requests to the MotionLab backend.
• CSRF protection token: a security token that helps prevent cross-site request forgery attacks.

Because these cookies are essential to the operation of the Service, they are set automatically and cannot be opted out of while using MotionLab. Blocking them through your browser may prevent the Service from functioning correctly.

Functional Cookies — improve your experience

These cookies remember your preferences and settings to provide a more personalised experience. They are not strictly necessary but make the Service more convenient. They include:

• Last session type preference: remembers whether your last selected session was daily maintenance, pre-workout, or post-workout, so we can pre-select it for your next visit.
• Display preferences: stores layout and display choices (e.g. preferred session duration, UI preferences) so they persist between sessions.
• Onboarding completion state: records whether you have completed the onboarding flow to avoid showing it again unnecessarily.

You can disable functional cookies through your browser settings or our cookie preference centre. Doing so will not prevent the Service from working but may result in a less personalised experience.

Analytics Cookies — can be opted out

These cookies collect anonymised information about how users interact with the Service, helping us understand which features are most useful and where improvements can be made. The data collected is aggregated and does not identify you personally. They include:

• Pages visited and time spent on each page or screen
• Session start and end points, including drop-off rates
• Feature usage frequency (e.g. which session types are most common)
• Device type, browser, and approximate geographic region (country level)
• Error and crash frequency for debugging purposes

Analytics cookies are only set with your consent. You can opt out at any time through your account settings or by following the browser instructions in Section 4 of this policy.

3. Third-Party Cookies

Some cookies are set by third-party services that we use to operate the platform. We do not control these cookies and they are governed by the respective third party's privacy policies.

• Supabase (Supabase Inc.): Supabase Auth and related services may set cookies or use local storage tokens as part of the authentication flow. Supabase's privacy practices are described at supabase.com/privacy.

We review our third-party service providers regularly and aim to limit the use of third-party cookies to those that are strictly necessary for the functionality they provide.

4. How to Manage Cookies

Most web browsers allow you to control cookies through their settings. Below are instructions for the most common browsers:

Google Chrome

Go to Settings → Privacy and security → Cookies and other site data. You can choose to block all cookies, block third-party cookies, or clear existing cookies.

Mozilla Firefox

Go to Settings → Privacy & Security → Cookies and Site Data. Firefox also offers Enhanced Tracking Protection to block third-party tracking cookies automatically.

Apple Safari

Go to Safari → Preferences → Privacy. You can prevent cross-site tracking and block all cookies. On iOS, go to Settings → Safari → Privacy & Security.

Microsoft Edge

Go to Settings → Cookies and site permissions → Manage and delete cookies and site data. You can choose to block third-party cookies or all cookies.

Please note that blocking essential cookies will prevent you from logging in and using most features of MotionLab. If you clear all cookies, your preferences and session will be reset.

5. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that sends a signal to websites requesting that your activity not be tracked. At present, there is no universally agreed-upon standard for how websites should respond to DNT signals, and MotionLab does not currently alter its behaviour in response to DNT signals. If a recognised standard is adopted in the future, we will update this policy accordingly.

If you wish to opt out of analytics tracking, the most reliable method is to use the cookie controls described in Section 4, or to adjust your preferences within the MotionLab account settings.

6. Contact

If you have any questions about this Cookie Policy or how we use tracking technologies, please contact us:

Email: legal@motion-lab.io