Privacy policy

Who we are

This site is operated by FreeWeightDojo, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Use the contact form for any request under this policy, including a request about your own data. We treat it as a formal route for data protection requests.

Analytics

We use PostHog to measure how the site is used. It runs one way for everybody and there is nothing to answer. No cookie is set, nothing is written to your browser storage, and no identifier is kept on your device.

We count which page was opened, whether it was opened in the installed app rather than a browser tab, and an approximate location taken from your IP address. If you use the workout builder we also count that a workout was built or finished, how many exercises and sets it held, how long it took, and whether a weight was recorded. We do not record which exercises you did or what you lifted.

To count visitors without storing anything, PostHog works out a one-way hash on its own servers from your IP address, your browser's user-agent and a random value that changes every day. That day's value is deleted once the day's figures are counted, so the hash cannot be turned back into you and cannot follow you from one day to the next.

We do not record session replays. We do not collect heatmaps, and we do not record what you click on or the text of what you clicked.

Your browser sends its IP address with the request. We use it for approximate location and for the hash above, and not to identify you.

PostHog processes this data for us on servers in the European Union. Cloudflare carries the request in transit, for PostHog and under the data protection terms PostHog publishes.

Browser errors are reported to the same place: what failed, and on which page. That reports our code, not you.

We run no advertising and no social-media trackers. We build no profile of you. We do not sell or share your data. Reading the exercise pages needs no account.

The workout builder

The workout builder needs an account. It is the only part of this site behind a sign-in.

We ask for an email address and a password. The address is stored so you can sign in. The password is stored only as a one-way hash and cannot be recovered. We send no email of any kind: no confirmation, no newsletter, no marketing, no password reset.

With an account we store the following, and nothing else:

• Your email address.
• Whether you lift in kilograms or pounds.
• The exercises you have starred as favorites.
• Any note you write against an exercise, such as a seat height or a form cue. One short note per exercise, and you can clear it at any time.
• Every workout you finish: when it started and ended, which exercises you did, how many sets, how many reps, and the weight where you recorded one. We keep the newest 500.

We do not collect your name, age, sex, height, weight or any health information.

Where it is kept

Supabase stores this for us on servers in Ireland, within the European Union. It is not transferred outside it. Only your own account can read your rows, and that is enforced by the database rather than by the app.

On your device

The app keeps a copy in your browser so it works during use and survives a reload mid-workout. That copy holds the items above, the workout you are part way through, any favorites, notes or deletions not yet sent to your account, your unit, and a sign-in token. Clearing your browsing data for this site removes all of it. Signing in again restores your training from your account.

Your exercise notes are kept there too, so they are readable with no connection and while you are signed out.

You can use the builder without an account by choosing to skip. Nothing then leaves your device and nothing is stored on our servers.

Deleting it

Settings inside the workout builder has a control that deletes your account immediately. It removes your workouts, your favorites, your exercise notes and your unit. We keep no archived copy and no backup, so the deletion cannot be reversed.

Counting workouts

This is separate from your account and applies whether or not you have one. We count that a workout was finished, how many exercises and sets it held, how long it took, and whether a weight was recorded. We do not record which exercises or what you lifted. We count each step of signing up, from the screen being shown to the outcome. A refusal records our own reason, such as a password being too short, and never the address or password you entered. Signing in, deleting an account and failed syncs are counted the same way. We also count how many workouts your browser has finished in total. None of it carries your email address or anything that identifies you.

Why there is no cookie banner

A banner asks permission to store something on your device. Reading this site stores nothing, so there is nothing to ask for.

The workout builder does store things on your device, listed above, and it stores them because it cannot work without them: your session would not survive a reload and you would be signed out on every page. Storage a service you asked for cannot run without does not need consent, which is why the builder does not ask either.

Fonts and demonstration clips are served from our own domain, so no third party receives your IP address when you read a page.

Server logs

Our hosting provider records standard access logs when a page is requested. These hold the IP address, the time, the page and the browser user-agent. They exist to serve the site and keep it secure, and are held under the provider retention policy. We do not use them to identify or profile visitors. The lawful basis is our legitimate interest in running a secure website.

If you contact us

The contact form asks for a name, an email address and a message. We keep what you send for as long as it takes to deal with it and to keep a record of the correspondence. We do not add you to a mailing list. The lawful basis is our legitimate interest in answering people who get in touch.

Your rights

Under UK and EU data protection law you can ask for a copy of the personal data we hold about you, ask us to correct or delete it, or object to our processing it. Ask through the contact form and we will deal with it within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.

Children

This site is not aimed at children and we do not knowingly collect anything from them.

Changes

If this policy changes, the date at the top changes with it.