Cookies and local storage

Advertising and analytics measurement

This site uses Google Analytics 4 to count visits and to see which pages and which campaigns bring people who find the product useful, and Google's advertising measurement to know when an advertisement led to a sign-up or a subscription. Both are Google services: they set cookies in your browser and send what they record to Google, where it is handled under Google's own privacy policy.

They measure a browser, not a person. We do not send your conversations, your email address, your salary figures or your payment details to Google, we do not use this to build a profile of you across other websites, and we build no remarketing audiences.

What follows is the complete list of what this site stores.

Strictly necessary

`token` — your signed-in session. Stored in your browser and sent with each request so that the server knows who you are. Without it you cannot stay signed in. It is removed when you sign out.

`settings` — your interface preferences: language, theme, which panels are open. Stored locally so the page does not flicker back to its defaults on every load.

Measurement

`frko_visitor` — a random identifier, created by your browser the first time you arrive, used to count visits and to know which campaign brought them. It contains no personal information and does not identify you; it identifies a browser, and it is replaced if you clear your storage.

`frko.theme` and `frko.pendingPrompt` — remembered for the length of your visit only. The first records which campaign page you arrived on so that the coaching matches it; the second holds the question you typed before you had an account, so that signing up does not lose it.

`frko_referral_code` — set only if you arrived through a friend's invitation link, so that the invitation is still known when you register.

Set by other companies

Our network edge provider sets a short-lived security cookie (typically `__cf_bm`) to tell human visitors from automated ones. It is required for the site to serve you safely and expires within half an hour.

When you pay, you are taken to the payment provider's own checkout, which sets its own cookies under its own policy. We do not control them and cannot read them.

Google Analytics sets `_ga` and `_ga_<container-id>`, two cookies that tell one browser from another so that a return visit is not counted as a new one. They expire after two years. Google's advertising measurement adds `_gcl_au` and, when you arrived from an advertisement, `_gcl_aw`, which record the advertisement click that brought you here so that a sign-up or a payment can be attributed to the campaign that produced it. They expire after about ninety days.

How to refuse all of it

Blocking cookies and site storage in your browser settings will stop the measurement described above, and the marketing pages will continue to work exactly as before. Signing in requires the session token, so blocking everything will prevent you from using the product itself — that is a limit of how sign-in works, not a choice we have made.

Google's own controls work as well: you can install Google's opt-out browser add-on for the browser you are using, and you can turn off advertising personalisation in your Google account.