Cookie policy

Last updated: 26 October 2026

In short: iaiafit uses a single first-party, strictly necessary cookie to keep you signed in. We do not use analytics, advertising or tracking cookies, and we do not load scripts from social networks or ad networks. That is why we do not ask for your consent with a banner: strictly necessary cookies are exempt from the consent requirement.

1. What cookies are

Cookies are small files that a website saves in your browser so it can remember something between visits, for example that you are signed in. Websites can also save data directly in the browser ("local storage" and "session storage"); we describe those here too, because the law treats them the same way.

2. Why we do not ask for consent

Under Article 4(5) of Romanian Law no. 506/2004 (which implements Directive 2002/58/EC, the "ePrivacy Directive"), storing information in your browser does not require consent when it is strictly necessary to provide a service you have explicitly requested. All cookies and data described below are of this kind: without them you could not stay signed in, the app would not remember your language or chosen screen, and it would not be protected against attacks. If we ever add cookies that are not strictly necessary, we will ask for your consent first.

Name	What for	Type	Duration
`jsid`	sign-in session: keeps you signed in to the app. It contains only a random identifier, no data about you.	strictly necessary, first-party (api.iaiafit.com)	180 days from last use, or until you sign out
`asid`	administrator session, only for the site's admin page (`/api/admin`). Regular users never receive this cookie.	strictly necessary, first-party, administrators only	8 hours at most; expires after 30 minutes of inactivity
`__cf_bm`, `cf_clearance`	may be set by Cloudflare, our hosting and protection provider, to tell real visitors from bots and stop attacks.	strictly necessary, Cloudflare (on our behalf)	`__cf_bm`: 30 minutes; `cf_clearance`: according to Cloudflare's security settings

The jsid cookie is marked HttpOnly (web pages cannot read it), Secure (sent only over encrypted connections) and SameSite=Lax (not sent with requests started by other websites, except ordinary navigation via a link).

4. What we save in your browser

This data stays on your device only and is not sent to us. It contains no health or journal data.

Local storage (kept until you delete it)

Name	What for
`lang`	your chosen language (Romanian or English)
`mode`, `logTab`, `ovTab`	which screen and tab you last had open
`onbType`	whether you prefer to answer by typing or by voice in the profile setup guide
`pkLater`	when you chose "Later" for passkeys, so we don't ask too often

Session storage (deleted when you close the tab)

Name	What for
`offerPasskey`, `obAt`	temporary steps after signing in or when changing the language

5. What we do not use

analytics cookies or scripts (for example Google Analytics);
advertising cookies or cross-site tracking cookies;
social media buttons or scripts;
external resources that would learn about your visit: fonts are hosted on our own server, so not even Google Fonts knows you visited.

If you choose to sign in with Google or Facebook (once this option is available), we send you to their website for that step, where their own cookie policies apply.

6. How you can control them

You can delete or block cookies and saved data at any time in your browser settings. If you block the jsid cookie, you will not be able to stay signed in to the app. Signing out also ends the session.

7. Contact

Questions about cookies or your data: contact@iaiafit.com. The controller is Pop Calin Bogdan PFA (full details in the Privacy policy).

This English version is provided for convenience; in case of discrepancy, the Romanian version prevails.