Cookie Policy
Version 2026-08 · Last updated 21 August 2026 · Effective 21 August 2026
Every cookie and similar technology Open Gym uses, what it does, and how long it lasts. Only the strictly necessary ones are set without asking you first.
1. What cookies are
A cookie is a small text file stored on your device by your browser. We also use comparable technologies — such as values held in your browser's local storage — and everything in this policy applies to those too.
Under Hungarian Act C of 2003 on electronic communications (§155) and the ePrivacy Directive, we may store strictly necessary cookies without consent, but we need your consent before setting any others. Where a cookie also involves processing personal data, the Privacy Policy explains that processing.
2. Strictly necessary cookies
These are required to operate the Platform and are set without consent. You cannot turn them off and still use the site.
| Name | Purpose | Lifetime | Set by |
|---|---|---|---|
og_visitor | A random identifier that lets us keep your shopping cart attached to your browser before and after you sign in. Contains no personal data itself. | 1 year | Open Gym (httpOnly) |
og_ref | Records which member referred you, so referrals are credited correctly if you sign up. Set only if you arrive via a referral link, and only the first time. | 90 days | Open Gym (httpOnly) |
og_click | Records which campaign or ad link brought you here, so we can tell which of our campaigns lead to sign-ups. Set only if you arrive via such a link, and only the first time; cleared when you sign up. The ad click identifier is shared with the ad platform only if you allowed advertising cookies. | 90 days | Open Gym (httpOnly) |
better-auth.session_token | Keeps you signed in across pages and subdomains. | Session / until sign-out | Open Gym (httpOnly) |
PARAGLIDE_LOCALE | Remembers whether you chose English or Hungarian. | 1 year | Open Gym |
Local storage: og_token | Holds your sign-in token for the app on this device, so API requests are authenticated. | Until sign-out | Open Gym |
og_consent | Remembers the cookie choice you made here, so we do not ask again on every visit. The record of your decision is itself strictly necessary — without it we could not honour a refusal. | 1 year | Open Gym |
Stripe sets its own cookies on its hosted checkout page for fraud prevention and payment security. Those are governed by Stripe's privacy policy.
3. Analytics cookies (consent required)
These are set only after you consent, and you can withdraw consent at any time.
| Name | Purpose | Lifetime | Provider |
|---|---|---|---|
ph_* (cookies and local storage) | Product analytics — which pages and features are used, and session replay, so we can find and fix problems. | 1 year | PostHog (EU hosting) |
_ga, _ga_* | Marketing analytics — how visitors find Open Gym and which campaigns bring people who go on to book. | Up to 2 years | Google Analytics |
In the native iOS and Android apps we do not track you. The apps load no advertising cookies or SDKs, do not follow you across other companies' apps or websites, and do not combine what we collect with data obtained from third parties for advertising. On the website, advertising cookies are used only if you allow them — see section 4. We never sell your data or share it with data brokers.
4. Advertising cookies (consent required, website only)
With your permission, the website uses advertising cookies to measure whether our ads worked — for example, whether someone who clicked an Open Gym ad on Google went on to sign up. They are never set in the native apps, never set before you choose, and we do not use them to show you ads on other sites based on your activity here.
| Name | Purpose | Lifetime | Provider |
|---|---|---|---|
_gcl_* | Ad click measurement — links a click on an Open Gym ad to a later sign-up or booking on our site. | 90 days | Google Ads |
If we add another advertising platform (such as Meta), it is listed here first and you are asked again before it runs.
5. Managing your choices
When you first visit the website we ask whether you accept analytics and advertising cookies — you can accept all, keep only the necessary ones, or choose each category separately. In the apps we ask about analytics only. Declining is as easy as accepting, and declining does not restrict your use of the Platform in any way. You can change your mind at any time from the cookie preferences link in the footer, and your choice is stored on that device so we do not ask again on every visit.
Until you choose, no analytics or advertising run at all — the trackers are not loaded, not just silenced. If you withdraw consent later we stop collecting immediately and delete the analytics and advertising cookies and stored identifiers already on your device.
6. Browser controls
Every major browser lets you block or delete cookies in its settings. Blocking strictly necessary cookies will break sign-in and the cart. You can also opt out of Google Analytics across all sites with Google's opt-out browser add-on.
7. Changes
We update this policy whenever we add or remove a cookie. The version and date at the top of the page tell you which version is current.
8. Contact
Questions about cookies: privacy@opengym.in.