In plain language
- FotoFit uses essential authentication cookies and may use optional, consent-gated website analytics when configured; it does not use advertising or cross-site behavioral tracking cookies.
- Your theme choice is stored locally in your browser.
- Because the current cookies are necessary to operate sign-in, turning them off will prevent authenticated features from working.
What we use
In production, authentication cookies are marked Secure and are shared across FotoFit subdomains so the website, dashboard, and API can support the same authenticated session. HttpOnly prevents page scripts from reading the token value.
- accessToken: an HttpOnly authentication cookie used to authorize a signed-in session. Its configured lifetime is up to 24 hours.
- refreshToken: an HttpOnly cookie used to renew a session. Its configured lifetime is up to 7 days and it is cleared on logout.
- theme: a local-storage preference for light, dark, or system appearance. It is not sent as a cookie.
- fotofit_analytics_consent: a first-party preference cookie recording whether you accepted or declined optional analytics. In production it is shared only across FotoFit subdomains, uses SameSite=Lax and Secure, and expires after one year. On local development hosts it remains host-only. An older local-storage value is migrated to this cookie once when possible.
- plausible_ignore: a local-storage opt-out flag set only when Plausible Analytics is configured and you decline or withdraw analytics consent; it is removed if you later accept.
Optional analytics
If Google Analytics 4 is configured for the public website and dashboard, or Plausible Analytics is configured for the public website, FotoFit asks for your choice before loading them. The same choice applies on fotofit.in and app.fotofit.in. With consent, FotoFit may attach Google's numeric browser and session identifiers to a hosted Dodo checkout so signed payment and refund notifications can report privacy-limited purchase or refund events; we do not send names, email addresses, payment details, customer content, or FotoFit entity names to analytics. Declining or withdrawing leaves optional analytics disabled immediately. Advertising storage, ad-user-data consent, ad personalization, and remarketing are not enabled by this choice.
Your controls
Use Analytics preferences in the public-site footer or dashboard control to accept, decline, or withdraw optional analytics. Clearing the fotofit_analytics_consent cookie makes FotoFit ask again. If a browser blocks preference storage, the choice applies only for the current tab and no saved grant is assumed later. If Plausible is configured, clearing only plausible_ignore can remove that provider's opt-out flag, but FotoFit still follows the shared consent cookie. Blocking or removing authentication cookies signs you out and prevents dashboard features from working until you sign in again.
Questions
For questions about browser storage, email hello@fotofit.in.