Cookie Policy

Labthlete uses exactly one cookie, and it is strictly necessary to keep you signed in. We do not use any analytics, tracking, advertising, profiling or cross-site cookies.

The one cookie we use

• ll_token— a secure session cookie set when you log in. It holds a signed token (JWT) so you stay signed in without re-entering your password. It is HttpOnly (JavaScript cannot read it), SameSite=Lax, and Secure over HTTPS, and expires within about 7 days (or when you log out, change your password, or delete your account). Because it is strictly necessary, it does not require consent under the ePrivacy rules.
• Theme preference— your light/dark choice is stored in your browser’s local storage (not a cookie), never sent to us, and used only to remember how you like the interface.

No analytics or tracking

There is no analytics library, tracking pixel, advertising identifier, or cross-site tracking in the service. We do not sell or share browsing behaviour. Because we set only a strictly-necessary cookie, there is no cookie banner to accept or reject.

Managing cookies

You can clear the session cookie by logging out, and clear site storage in your browser settings at any time (note that removing ll_token signs you out).

If we add non-essential cookies in future

If we ever introduce a non-essential cookie (for example analytics), we will update this policy first and, where the law requires it, ask for your consent before setting it.

Contact

Questions: privacy@labthlete.com. You may also lodge a complaint with the Garante per la protezione dei dati personali (www.garanteprivacy.it).