Cookie policy
Last updated October 22, 2026.
We use cookies that the site needs in order to run, and optional analytics cookies only if you allow them. The banner offers both choices at the same size. Neither choice is pre-selected. Analytics scripts do not load until you allow them.
Essential
- csg_cookie_consent — remembers "essential" or "all" for about 180 days. First-party. Set by this site's own script.
- Antiforgery cookie — protects forms from cross-site posts. Set when you open a form.
- Session cookie — keeps a short server session (about 30 minutes of inactivity). Used by signed-in tools.
- .AspNetCore.Cookies — Microsoft sign-in session, up to 5 days, after you sign in with Microsoft.
- OtpAuth — email-code sign-in session, up to 5 days, after you sign in that way. HttpOnly, Secure, SameSite=Lax.
Essential cookies are not used for advertising. Blocking them in the browser will break sign-in and forms.
Analytics, only after "Allow analytics"
Microsoft Application Insights may then set browser cookies such as ai_user and ai_session and send page-view telemetry to our Azure Application Insights resource. The server can still record its own request logs either way. Those server logs are described in the privacy policy.
Your current choice on this browser: not saved yet. Analytics stay off.
What we do not use
No advertising cookies, no Google Analytics, no Meta pixel, and no Stripe.js. Chart.js on the signed-in workout page is a file we host. It does not set a cookie.