Cookie Policy
Information about cookies and similar technologies used on the GFitness website.
Last updated: 4 October 2026
1.What Are Cookies?
Cookies are small text files that a website or an embedded service stores in your browser. Similar technologies, such as local storage and session storage, work in a comparable way.
2.Cookies Used by GFitness
GFitness itself does not use optional analytics, advertising or tracking cookies, and does not store anything in your browser's local or session storage. The technical hosting infrastructure may set cookies required for secure and reliable website delivery.
Our hosting sets two technically necessary cookies on every page: __cf_bm (Cloudflare bot protection) and __dpl (a technical hosting cookie). Both are listed in the overview below.
Your language is determined by the page address (for example /de), not by a cookie.
3.Third-Party Content (Calendly)
Our contact page includes an embedded Calendly booking calendar. The Calendly widget is loaded when the page is opened. Calendly categorises some cookies and similar technologies (from Calendly, Cloudflare, Stripe and Google reCAPTCHA) as necessary for providing, securing or operating the booking service. It also uses optional technologies depending on your consent.
Calendly provides its own cookie consent interface within the booking widget. You can reject optional cookies (Reject All), accept them (Accept All), or manage them individually through Cookie Settings.
According to the consent information shown in the widget, optional technologies may be used for purposes including personalisation, analysis of website interactions (including clicks, cursor movements and screen recordings) and marketing. In our test, these optional technologies were only loaded after Accept All — for example Google Analytics, Google Tag Manager, Meta (Facebook) Pixel, Segment, Sprig and Braze. After Reject All, none of them were loaded.
Pages on the GFitness website that do not contain the Calendly booking widget are not affected. More information: Calendly privacy notice.
4.Cookie Overview
The following cookies were observed on the GFitness website, including the contact page:
| Cookie | Provider | Purpose | Category | Duration | When set |
|---|---|---|---|---|---|
| __cf_bm | Cloudflare (GFitness hosting) | Bot protection for the website | Necessary · Security | 30 minutes | Every page, on load |
| __dpl | Hosting platform / Lovable | Technical website delivery / deployment consistency | Necessary / Technical | 24 hours | On first visit |
| __cf_bm | Cloudflare (via Calendly) | Bot protection for the Calendly widget | Necessary · Security | 30 minutes | Contact page, before any choice |
| _cfuvid | Cloudflare (via Calendly) | Rate limiting for the Calendly widget | Necessary · Security | Session | Contact page, before any choice |
| m | Stripe (via Calendly) | Fraud prevention | Necessary · Security | 400 days | Contact page, before any choice |
| OptanonConsent | Calendly (OneTrust) | Stores your choice in Calendly's cookie banner | Consent | 1 year | Contact page, before any choice |
| OptanonAlertBoxClosed | Calendly (OneTrust) | Records that you made a choice in Calendly's cookie banner | Consent | 1 year | After Reject All or Accept All |
- __cf_bm
- Provider: Cloudflare (GFitness hosting)
- Purpose: Bot protection for the website
- Category: Necessary · Security
- Duration: 30 minutes
- When set: Every page, on load
- __dpl
- Provider: Hosting platform / Lovable
- Purpose: Technical website delivery / deployment consistency
- Category: Necessary / Technical
- Duration: 24 hours
- When set: On first visit
- __cf_bm
- Provider: Cloudflare (via Calendly)
- Purpose: Bot protection for the Calendly widget
- Category: Necessary · Security
- Duration: 30 minutes
- When set: Contact page, before any choice
- _cfuvid
- Provider: Cloudflare (via Calendly)
- Purpose: Rate limiting for the Calendly widget
- Category: Necessary · Security
- Duration: Session
- When set: Contact page, before any choice
- m
- Provider: Stripe (via Calendly)
- Purpose: Fraud prevention
- Category: Necessary · Security
- Duration: 400 days
- When set: Contact page, before any choice
- OptanonConsent
- Provider: Calendly (OneTrust)
- Purpose: Stores your choice in Calendly's cookie banner
- Category: Consent
- Duration: 1 year
- When set: Contact page, before any choice
- OptanonAlertBoxClosed
- Provider: Calendly (OneTrust)
- Purpose: Records that you made a choice in Calendly's cookie banner
- Category: Consent
- Duration: 1 year
- When set: After Reject All or Accept All
Before any choice, the Calendly widget also uses browser storage for security and operation: Calendly _cache (local storage, functional), Stripe fraud-prevention entries (session storage) and Google reCAPTCHA entries rc::a / rc::c (security). After Accept All, Calendly additionally stores analytics identifiers from Segment (ajs_anonymous_id, ajs_user_id) and Sprig (userleap.ids, sprig.anon.env.vid.map) in local storage. These are not set after Reject All.
Durations are those observed in our test. Third-party providers may change their cookies at any time.
5.Spam Protection
The onboarding questionnaire uses Cloudflare Turnstile to protect against automated submissions and spam. Turnstile is only loaded on the final step. Our automated test observed one technical entry ( cf.turnstile.u) in the local storage of Cloudflare's challenge frame, but did not observe a Turnstile cookie. The test could not complete human verification, so storage after a successful check may depend on the applicable Turnstile configuration. Turnstile is not used for analytics or advertising (Cloudflare privacy).
6.Managing Cookies
The GFitness website itself does not use any non-essential cookies.
For the embedded Calendly booking calendar, you can reject or accept optional cookies directly in the consent banner provided by Calendly. Use Cookie Settings to manage your choice in more detail.
You can also view and delete cookies, or block third-party cookies, in your browser settings at any time.
If you block cookies required by Calendly, the booking calendar may not work fully. You can always contact us at andy@gfitness.eu.
