Cookie Policy
Version 2026-08 · Last updated 21 August 2026 · Effective 21 August 2026
Every cookie and similar technology Open Gym uses, what it does, and how long it lasts. Only the strictly necessary ones are set without asking you first.
1. What cookies are
A cookie is a small text file stored on your device by your browser. We also use comparable technologies — such as values held in your browser's local storage — and everything in this policy applies to those too.
Under Hungarian Act C of 2003 on electronic communications (§155) and the ePrivacy Directive, we may store strictly necessary cookies without consent, but we need your consent before setting any others. Where a cookie also involves processing personal data, the Privacy Policy explains that processing.
2. Strictly necessary cookies
These are required to operate the Platform and are set without consent. You cannot turn them off and still use the site.
| Name | Purpose | Lifetime | Set by |
|---|---|---|---|
og_visitor | A random identifier that lets us keep your shopping cart attached to your browser before and after you sign in. Contains no personal data itself. | 1 year | Open Gym (httpOnly) |
og_ref | Records which member referred you, so referrals are credited correctly if you sign up. Set only if you arrive via a referral link, and only the first time. | 90 days | Open Gym (httpOnly) |
better-auth.session_token | Keeps you signed in across pages and subdomains. | Session / until sign-out | Open Gym (httpOnly) |
PARAGLIDE_LOCALE | Remembers whether you chose English or Hungarian. | 1 year | Open Gym |
Local storage: og_token | Holds your sign-in token for the app on this device, so API requests are authenticated. | Until sign-out | Open Gym |
og_consent | Remembers the cookie choice you made here, so we do not ask again on every visit. The record of your decision is itself strictly necessary — without it we could not honour a refusal. | 1 year | Open Gym |
Stripe sets its own cookies on its hosted checkout page for fraud prevention and payment security. Those are governed by Stripe's privacy policy.
3. Analytics cookies (consent required)
These are set only after you consent, and you can withdraw consent at any time.
| Name | Purpose | Lifetime | Provider |
|---|---|---|---|
ph_* (cookies and local storage) | Product analytics — which pages and features are used, and session replay, so we can find and fix problems. | 1 year | PostHog (EU hosting) |
_ga, _ga_* | Marketing analytics — how visitors find Open Gym and which campaigns bring people who go on to book. | Up to 2 years | Google Analytics |
We do not use advertising or cross-site tracking cookies, and we do not share cookie data with advertising networks. We do not track you. We do not follow you across other companies' apps or websites, we do not combine what we collect with data obtained from third parties for advertising, and we never sell or share your data with advertisers or data brokers. This is true of the native iOS and Android apps as well as the website.
4. Managing your choices
When you first visit we ask whether you accept analytics cookies. Declining is as easy as accepting, and declining does not restrict your use of the Platform in any way. You can change your mind at any time from the cookie preferences link in the footer, and your choice is stored on that device so we do not ask again on every visit.
Until you choose, no analytics run at all — the trackers are not loaded, not just silenced. If you withdraw consent later we stop collecting immediately and delete the analytics cookies and stored identifiers already on your device.
5. Browser controls
Every major browser lets you block or delete cookies in its settings. Blocking strictly necessary cookies will break sign-in and the cart. You can also opt out of Google Analytics across all sites with Google's opt-out browser add-on.
6. Changes
We update this policy whenever we add or remove a cookie. The version and date at the top of the page tell you which version is current.
7. Contact
Questions about cookies: privacy@opengym.in.