← Back to home
Cookie Policy
This page explains which cookies we use and why.
- cookie-consentNecessary
- Provider
- My Pilates Flows
- Purpose
- Records that the cookie notice has been acknowledged
- Expiry
- 365 days
- NEXT_LOCALENecessary
- Provider
- My Pilates Flows (next-intl)
- Purpose
- Stores the selected display language (de / en)
- Expiry
- Session — until the browser is closed
- sb-gzhhpvodechpepnwmpwp-auth-tokenNecessary
- Provider
- My Pilates Flows (Supabase Auth)
- Purpose
- Sign-in — keeps your session alive; rewritten each time the session is renewed
- Expiry
- Up to 400 days; deleted when you sign out
- sb-gzhhpvodechpepnwmpwp-auth-token-code-verifierNecessary
- Provider
- My Pilates Flows (Supabase Auth)
- Purpose
- Secures the email-link sign-in (PKCE verifier, a copy of the most recent request); set as soon as you request a sign-in link
- Expiry
- 60 minutes, as long as the sign-in link is valid; deleted sooner when you sign out or your session ends
- sb-gzhhpvodechpepnwmpwp-auth-token-flow-<id>-code-verifierNecessary
- Provider
- My Pilates Flows (Supabase Auth)
- Purpose
- Secures one requested email-link sign-in (PKCE verifier); one cookie per request, at most five at a time, the oldest replaced
- Expiry
- 60 minutes, as long as the sign-in link is valid; deleted sooner when you sign out or your session ends
- sb-gzhhpvodechpepnwmpwp-auth-token-flows-code-verifierNecessary
- Provider
- My Pilates Flows (Supabase Auth)
- Purpose
- List of pending sign-in requests (random identifiers only), so that their verifiers can be found and deleted
- Expiry
- 60 minutes, as long as the sign-in link is valid; deleted sooner when you sign out or your session ends
- pilates-intended-checkoutNecessary
- Provider
- My Pilates Flows
- Purpose
- Remembers the plan you picked on the pricing page so checkout can resume after sign-up
- Expiry
- 30 minutes
| Name | Provider | Purpose | Expiry | Type |
|---|---|---|---|---|
| cookie-consent | My Pilates Flows | Records that the cookie notice has been acknowledged | 365 days | Necessary |
| NEXT_LOCALE | My Pilates Flows (next-intl) | Stores the selected display language (de / en) | Session — until the browser is closed | Necessary |
| sb-gzhhpvodechpepnwmpwp-auth-token | My Pilates Flows (Supabase Auth) | Sign-in — keeps your session alive; rewritten each time the session is renewed | Up to 400 days; deleted when you sign out | Necessary |
| sb-gzhhpvodechpepnwmpwp-auth-token-code-verifier | My Pilates Flows (Supabase Auth) | Secures the email-link sign-in (PKCE verifier, a copy of the most recent request); set as soon as you request a sign-in link | 60 minutes, as long as the sign-in link is valid; deleted sooner when you sign out or your session ends | Necessary |
| sb-gzhhpvodechpepnwmpwp-auth-token-flow-<id>-code-verifier | My Pilates Flows (Supabase Auth) | Secures one requested email-link sign-in (PKCE verifier); one cookie per request, at most five at a time, the oldest replaced | 60 minutes, as long as the sign-in link is valid; deleted sooner when you sign out or your session ends | Necessary |
| sb-gzhhpvodechpepnwmpwp-auth-token-flows-code-verifier | My Pilates Flows (Supabase Auth) | List of pending sign-in requests (random identifiers only), so that their verifiers can be found and deleted | 60 minutes, as long as the sign-in link is valid; deleted sooner when you sign out or your session ends | Necessary |
| pilates-intended-checkout | My Pilates Flows | Remembers the plan you picked on the pricing page so checkout can resume after sign-up | 30 minutes | Necessary |
Cookie names beginning with “sb-” contain the identifier of our Supabase project. If the session value exceeds the permitted cookie size, it is split across several cookies with the suffixes .0, .1 and so on.
Measurement and objection
Every cookie listed above is technically necessary; we set no cookie that would require consent. For anonymous audience and loading-performance measurement we additionally use a cookieless method (Vercel Web Analytics and Speed Insights). It sets no cookies and reads nothing from your device, and it runs on our legitimate interest under Art. 6(1)(f) GDPR — so you can object at any time, with no reason required, by sending an informal email to info@mypilatesflows.com. Section 4 of our privacy policy describes what is transmitted.