Cookie Policy
Last updated: 8 October 2026 · UK PECR and UK GDPR
Cookie summary
Essential cookies
Sign-in and service only
Analytics cookies
None (cookieless Vercel Analytics)
Advertising cookies
None
Third-party tracking
None
1. What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They make websites work and provide information to the operator. The UK PECR and UK GDPR govern how cookies may be used.
2. Cookies We Use
| Cookie | Host | First or third party | Type | Purpose | Duration | What it holds |
|---|---|---|---|---|---|---|
| sb-...-auth-token (may be split into .0 and .1) | app.fitoutinsider.com | First party | Essential | Keeps you signed in. Set by Supabase, our sign-in provider | Until you close your browser, or 7 days with "remember me" | Your user ID, email address and session tokens |
| fitout-snonce | app.fitoutinsider.com | First party | Essential | Security check that your session has not been taken over | 30 days | A random value, no personal data |
| fitout-remember | app.fitoutinsider.com | First party | Essential | Remembers whether you ticked "remember me" | Until you close your browser, or 7 days with "remember me" | Your choice only |
| foi-project-id | app.fitoutinsider.com | First party | Essential | Reopens the project you are working in | Until you sign out | A project reference |
| pending_promo | app.fitoutinsider.com | First party | Essential | Carries a promo code into your new account at sign-up | 1 hour | The promo code, if you entered one |
| pending_plan | app.fitoutinsider.com | First party | Essential | Carries your chosen plan into your new account at sign-up | 24 hours | The plan you chose |
| pending_terms_accept | app.fitoutinsider.com | First party | Essential | Carries your Terms acceptance into your new account at sign-up | 1 hour | That you accepted the Terms |
| pending_industry_update | app.fitoutinsider.com | First party | Essential | Carries your industry-update choice into your new account at sign-up | 1 hour | Whether you asked for the monthly industry update |
| portal_auth_<token> | app.fitoutinsider.com | First party | Essential | Keeps a client portal open after its access code is entered | 24 hours | A security value for that portal, no personal data |
| fi_room_session | app.fitoutinsider.com | First party | Essential | Keeps a project room guest signed in after they use their sign-in link | 24 hours | A security value for that guest's session, no other personal data |
All our cookies are sent over HTTPS only, are set on the app (app.fitoutinsider.com), and are first party - none is set by a third party. Some can be read by the app's own code, which it needs to work. None is used for analytics, advertising or tracking. Our public website (this one) sets no cookies at all.
3. What We Do Not Use
FitOut Insider does not use Google Analytics, advertising/retargeting cookies, social media tracking pixels, or heatmap/session-recording tools. Our analytics (Vercel Web Analytics) does not place cookies or use similar storage on your device. It does not track visitors across websites or devices and does not store IP addresses. It does not require your consent under GDPR or PECR. Your data is never profiled or sold. In the app (not on this public website) we use Vercel Speed Insights to measure page load performance. It collects anonymous data and does not identify you.
4. Local Storage
The app also uses your browser's local storage and cache so that it works quickly and keeps working without a signal. They hold your settings and preferences, your active project, form drafts, changes you have not yet saved, and copies of the registers and tool data you have opened. Site photos are kept only in your browser and are not stored on our servers. This is needed for the service you asked for and is not used for tracking or advertising. When you sign out we remove your site photos, and we ask you first if you have photos or changes that have not been saved. We also remove the other copies, unless changes made on that browser, by you or by another account, are still waiting to be sent to us. In that case we keep all these copies on the device, so that nothing is lost, until the changes have been sent or discarded and you sign out again. On a shared computer, clear your browser data after you sign out. Clearing your browser data removes everything, including changes not yet sent. No third-party script writes to your browser's local storage.
5. YouTube Videos
Videos in the CPD Hub are hosted by YouTube. A video loads only when you click it, and it uses YouTube's privacy-enhanced mode (youtube-nocookie.com). When you play a video, YouTube (Google) receives your IP address and may store information on your device. Google's privacy policy applies to that.
6. Your Consent
Every cookie we set is needed to provide the Service you have asked for, so under PECR none requires consent. We set no analytics, advertising or tracking cookies, so there is no cookie banner. You can clear our cookies at any time in your browser, but you will then be signed out.
7. Managing Cookies
You can control cookies via your browser settings (Chrome, Firefox, Safari, Edge → Privacy/Cookies). Note: blocking the essential session cookie will prevent you from logging in.
8. Changes to This Policy
We may update this Cookie Policy from time to time, particularly if we add features that require additional cookies. The most recent update date is shown at the top of this page.
9. Contact
For any questions about our use of cookies, contact: hello@fitoutinsider.com