There are no cookies on the landing page
brod.profblu.com — the landing page and these documents — installs not a single cookie, carries no advertising pixels and loads no third-party resources: the typefaces are served from our own server. It stores two things, and neither is a cookie:
| What is stored | What for | How long it lasts | Do we need your permission? |
|---|---|---|---|
| The language you chose | showing you the landing page in that language again if you enter through the root without asking for one | in your browser, until you delete it | No, it is essential for this to work |
| Which link or site you arrived from | being able to attach it if you end up creating an account from here | in your browser, only while the tab is open | No, it is essential for this to work |
If you open a link with a language in the address (/en/…, /it/…), that choice always wins, whether you have one saved or not. And where you arrived from never travels to the server on every request, the way a cookie would: it is deleted when the tab is closed.
What the mobile application stores goes into the phone's secure storage
Everything the Brod application stores on your phone lives in the phone's own secure storage. It does not use an application's ordinary storage for any of this: it is a deliberate decision, so that what is there cannot be read by another application or by a plain-text dump of the device.
| What is stored | What for | How long it lasts | Do we need your permission? |
|---|---|---|---|
| What keeps you signed in without retyping your password | not asking you for your password every time you open the application | until you sign out or uninstall the application; in any case it stops working after seven days unused | No, it is essential for this to work |
| Your name and email, already saved from last time | showing you your session as soon as the app opens, without waiting for the server | until you sign out or uninstall the application | No, it is essential for this to work |
| A single-use item that completes the sign-in and is deleted as soon as it finishes | finishing the sign-in when you return from the browser after signing in with Apple | the seconds that step takes: it is deleted as soon as it finishes | No, it is essential for this to work |
| Whether you enabled Face ID or fingerprint | asking for the unlock when you open the application | until you turn it off or uninstall the application | Yes: it is only stored if you enable it |
| The language you chose | showing you the application in that language | until you change language or uninstall the application | No, it is essential for this to work |
| The sets you recorded that have not been sent yet | not losing what you note down while training without coverage | until those sets reach the server | No, it is essential for this to work |
None of this serves advertising, tracking you across applications, or profiling you. It is described in more detail in the privacy policy, in the section "What your phone stores, and what it does not".
On the my.brod.profblu.com panel
The management panel for coaches and gyms uses the same storage shared by every panel on the platform:
| What is stored | What for | How long it lasts | Do we need your permission? |
|---|---|---|---|
| What keeps you signed in without retyping your password | not asking you for your password on every page | in your browser, until you delete it; it stops working when you sign out, and in any case after seven days unused | No, it is essential for this to work |
| Which organisation you are working with | showing you the data of the gym you work with and not another's | in your browser, until you delete it | No, it is essential for this to work |
| The language you chose | showing you the panel in that language | in your browser, until you delete it | No, it is essential for this to work |
| The look you chose (light or dark) and whether you left the side menu collapsed | opening the panel the way you left it | in your browser, until you delete it | No, it is essential for this to work |
| A single-use item that completes the sign-in and is deleted as soon as it finishes | letting you sign in with your platform account | in your browser, only while the tab is open; in practice, the seconds the sign-in takes | No, it is essential for this to work |
| Whether you left the assistant open or closed | opening it the way you left it | in your browser, until you delete it | No, it is essential for this to work |
| The filters you left set on a table | not making you set them again | in your browser, until you delete it | No, it is essential for this to work |
Visit measurement
We count how many times each page is viewed with a program of ours, called Umami, running on our own server. It leaves neither a cookie nor an identifier in your browser, so it stores nothing of yours and does not allow reconstructing a specific person's path: only aggregate figures per page.
There is no Google Analytics and no Google Tag Manager on any Brod web page.
Why we do not ask for your consent
Everything above is strictly necessary to provide you a service you yourself have requested: keeping your session, remembering your language and your organisation, not losing a set you recorded without coverage, or measuring visits without cookies or identifiers. It is exactly what article 22.2 of the LSSI exempts. The one exception marked optional is the biometric setting, which is only written if you enable it yourself from Profile → Face ID / fingerprint.
How to delete them
On the phone: uninstalling the application deletes the entire secure storage. In the browser, from its settings, like any other local data; keep in mind that deleting what keeps the panel's session open signs you out.
Technical detail, if you want it
If you want to find each item and delete them one by one, these are the exact names they are stored under:
| Exact name | What it is |
|---|---|
brod.lang (localStorage on the landing page) | the language you chose on the landing page |
prosecco.origen-visita (sessionStorage on the landing page) | which link or site you arrived from, with the utm_* parameters |
coach_refresh_token (Keychain on iOS, Keystore on Android, through expo-secure-store) | what keeps the session open on the phone |
coach_user (the phone's secure store) | your identity already saved from last time |
coach_pending_authorization (the phone's secure store) | the single-use item that completes the sign-in (PKCE) |
coach_biometric_enabled (the phone's secure store) | whether you enabled Face ID or fingerprint |
coach_locale (the phone's secure store) | the language you chose in the application |
coach_setq_v1, coach_setq_v1_* (the phone's secure store) | the sets pending upload |
brod.admin.rt (localStorage) | what keeps the panel's session open |
brod.admin.org (localStorage) | which organisation you are working with |
brod.admin.lang (localStorage) | the language you chose in the panel |
@prosecco/admin-shell.theme, @prosecco/admin-shell.sidebar (localStorage) | the light or dark look and the side menu |
identity.pending-authorization (sessionStorage) | the single-use item that completes the sign-in on the panel |
prosecco.kitten.dock-collapsed.brod (localStorage) | whether you left the assistant open or closed |
*-filters, one per table (localStorage) | the filters you left set |