Cookie Policy
Last updated: 17 October 2026
The short version
Swoleboard only uses strictly necessary cookies — the ones that keep you signed in and keep sign-in secure. No advertising cookies, no analytics or tracking cookies, no third-party cookies. Because they are strictly necessary, we don't need to ask for consent and there is no cookie banner.
The cookies we set
swoleboard.session_token
Keeps you signed in. Secure, HttpOnly (scripts can't read it) and SameSite=Lax.
Kept for: up to 30 days, renewed while you use the app.
swoleboard.state (and similar sign-in cookies)
Protect Google/Facebook sign-in against forgery while you are being redirected.
Kept for: a few minutes.
On HTTPS the names start with "__Secure-", which tells the browser to send them only over HTTPS.
Other storage
When you install Swoleboard as an app, your browser may cache the app's files so it opens quickly. This holds no personal information.
Your choices
You can delete cookies in your browser settings at any time; you will simply be signed out. To sign out on every device at once, use Sign out everywhere in Settings.
More about how we handle data: Privacy Policy.