Privacy

Public workout pages do not require an account. Workout timer state stays in memory in your browser and is discarded when you leave the page. This initial release does not use analytics or advertising trackers.

Admin access

Admin access uses an essential, HTTP-only session cookie that expires after eight hours. The database stores admin email addresses, password hashes, session token hashes, and temporary login rate-limit records. Uploaded exercise media and published content are stored on the server.

Server records

The hosting provider may retain access logs, including IP addresses and requested pages. Retention and a verified owner contact must be set before public launch. Do not upload personal information into exercise content.

This privacy notice must be reviewed when hosting, analytics, support, or other services are configured.