Cookie Policy
Last updated: 29 September 2026 · Version 1.3 (draft)Vollkraaft stores only what it needs to sign you in, remember a few settings you chose and take payment. We set no advertising or analytics cookies.
What we store
| Name / type | Set by | Purpose | Strictly necessary? |
|---|---|---|---|
| Sign-in session (browser sessionStorage, or localStorage if you tick "Keep me signed in") | Vollkraaft / Supabase | Keeps you signed in | Yes |
| "Keep me signed in" choice (localStorage) | Vollkraaft app | Remembers whether your session should outlast the browser session | Yes (your choice) |
| Sign-in throttle (localStorage) | Vollkraaft | Slows down repeated sign-in, sign-up, password-reset and account-deletion attempts | Yes (security) |
| Interface preferences (localStorage and sessionStorage) | Vollkraaft app | Remembers small display choices: the bar-loader style, and whether you have already seen the diet welcome and the intro animation | Yes (functional) |
| Thor check-in timer (localStorage) | Vollkraaft app | Limits automatic Thor check-ins to one every three hours | Yes (functional) |
| Stripe cookies (on the checkout only) | Stripe | Fraud prevention while paying | Yes (payment) |
| Hosting cookies | Netlify | Load balancing and delivering the site | Yes |
| YouTube choice (localStorage) | Vollkraaft app | Remembers that you agreed to play exercise videos from YouTube on this device | Yes (records your choice) |
| YouTube player storage | YouTube (Google) | The privacy-enhanced player (youtube-nocookie.com) loads only after you agree to play a video; YouTube may then store data on your device while it plays | No, only with your agreement |
Apart from the YouTube player, everything above is strictly necessary to provide a service you asked for, so it does not require consent under the ePrivacy rules. The YouTube player only loads after you agree in the app; to be asked again, clear this site's data in your browser. None of it is used for analytics, profiling or advertising, and none of the app's own entries leave your device.
Third parties
Stripe may set its own cookies on its checkout components for fraud prevention; see Stripe's privacy notice. Our fonts are hosted on our own servers, so no font provider is contacted. Which other services your device contacts while you use the app is listed in §6 of our Privacy Policy.
Controlling storage
You can clear cookies and local storage in your browser settings at any time. If you clear the sign-in session you will simply be signed out and asked to log in again.
Changes
If we ever add a non-essential cookie, we will ask for your consent first and update this page.
Vollkraaft
Back to plans