Cookie Policy
Effective: 2026-10-12
The short version
- Our website and app set no cookies.
- We store a few items in your browser or app storage. Most are needed for the app to work, including the copy of your synced data and your sign-in. The table below lists every one.
- Anything optional (remembering your theme, anonymous usage counts) only happens if you say yes. Saying no is as easy as saying yes.
- No analytics companies, no ad networks, no tracking pixels.
- Stripe sets its own cookies on its checkout page, only if you go there to buy Pack Plus.
Cookies and similar storage
Cookies are small files websites put in your browser. Pack Workout does not use any. Instead, the app and website keep data in your browser's own storage (localStorage, IndexedDB and, for offline use of the web app, Cache Storage), or in the Android app's private storage. The law treats this storage much like cookies, so this policy explains all of it and we ask for your consent before anything optional is stored.
Everything we store
| Name | Type | Category | What it holds and why | How long it stays |
|---|---|---|---|---|
pack-workout (stores: sessions, routines, exercises, settings, meta, body, weights, pending, tombstones) |
IndexedDB database | Necessary | The copy on this device of your account data: workouts, routines, custom exercises and settings, and, if you use Body & nutrition, your body profile (body) and weigh-ins (weights). It lets the app open quickly and work offline; it syncs with your account when you are online. pending and tombstones list the changes and deletions this device has not synced yet. meta holds a random device ID (meta.deviceId), where the last sync stopped (syncCursor), when it last finished (lastSyncedAt), and a one-way hash of the email of the account this data belongs to (owner), so that if someone else signs in on this device, your data is removed instead of being added to their account. Your cookie choices and whether this device has shown the welcome screens are kept here too and never sync. The device ID is sent to our server only with AI requests, where we keep only a one-way hash of it to count free requests per device. |
Until you sign out on this device, delete it (More > Your data > Delete all data on this device), clear this site's data in your browser, or uninstall the Android app. Your account keeps its copy. |
pw-consent |
localStorage | Necessary | Your cookie and storage choices, the version of this notice you answered, and when. Without it we would have to ask you again on every page. | Until you clear this site's data. We ask again if we change what we store. |
pw-session |
localStorage | Necessary | Your sign-in session token and when it expires ({ token, expiresAt }). Present whenever you are signed in, which you need to be to use the app. |
Until you sign out, or the session expires (at most 90 days); the app removes an expired one when it starts |
pw-app |
Cache Storage (web app only) | Necessary | Copies of the web app's own files (page, scripts, styles, fonts, icons) so it opens without a connection. No personal data: your data stays in pack-workout, and nothing from our server is cached. The Android app does not use it. |
Replaced as new versions load; removed when you clear this site's data |
pw-theme |
localStorage | Preferences | The website theme you picked (light, dark or system). Only stored if you allow Preferences. | Until you change it or clear this site's data. Deleted if you switch Preferences off. |
That is the complete list. If we add anything, we will update this table and ask for your consent again where needed.
The categories
- Necessary (always on): storage the app cannot work without: the copy of your own data, your sign-in, and the record of your choices. It is used only to give you the app. The law does not require consent for this, but we still tell you about it.
- Preferences (off until you allow it): remembers small website choices, such as your theme, between visits.
- Analytics (off until you allow it): sends anonymous counts, such as "pricing page viewed" or "export used", to our own server. It stores nothing on your device and uses no cookies, no device ID and no account link. We never use an outside analytics company.
How consent works
- On your first visit, a banner offers Accept all, Reject all and Customize. All three are equally easy to choose. Nothing is pre-ticked.
- You can use the website and the app whatever you choose. There is no cookie wall.
- Nothing optional runs until you choose.
- Change your mind anytime: "Cookie settings" in the website footer, or the Settings screen in the app. Switching something off stops it straight away.
- Your choice is stored only on your device (
pw-consent), with the notice version (2026-10-12) and the date and time.
The Android app
The Android app follows the same rules: it uses only the necessary storage listed above, kept in the app's private storage, and analytics stays off unless you switch it on. It also:
- sets no cookies of its own and asks for one Android permission only: internet access;
- keeps its data out of Android's backups (cloud backup and phone-to-phone transfer are switched off for it); your data moves to a new phone through your account when you sign in there;
- saves a file you export in its private cache, so Android's share sheet can hand it to the place you choose, and deletes that copy the next time the app starts, before your next export, or when you delete all data on the device;
- opens our website, these policies and Stripe's checkout in your phone's browser (a "Custom Tab"), where that browser's own cookies and settings apply.
Third parties
Stripe. When you choose to buy Pack Plus, Stripe's checkout page on stripe.com opens in a new browser tab (in the Android app, in your phone's browser). Stripe sets its own cookies there, for example to prevent fraud and to make the payment work. This only happens if you open checkout; our own pages do not load anything from Stripe. See Stripe's cookie policy.
Nobody else. We do not use analytics providers, advertising networks, social media buttons, embedded videos, or fonts and scripts from other websites.
How to delete stored data
- In the app: signing out, or More > Your data > Delete all data on this device, removes your data and the device ID from that device. Your account keeps its copy until you delete it (see the Privacy Policy).
- In your browser: clear the site data for https://lobolift.com in your browser settings. This signs you out and removes the copy of your data in that browser. Changes that have not synced yet are lost, so sync first.
- Android: uninstall the app, or clear its storage in Android's settings.
Questions
Email privacy@lobolift.com. See our Privacy Policy for more about how we handle data.