Cookie Policy

Last updated: 4 July 2026

In compliance with Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE) and Regulation (EU) 2016/679 (GDPR), NEXUSVIBE SL (trading as FitConnect Pro) provides this Cookie Policy to explain what cookies are, which ones we use on https://fitconnect.pro, for what purpose, and how you can manage or withdraw your consent.

What are cookies?

Cookies are small text files that a website stores on your device (computer, tablet or phone) when you visit it. They let the site recognise your device, remember information about your visit (such as language, timezone or session state) and function correctly.

Alongside cookies we use similar technologies (for example, the browser's local storage and session storage) that serve equivalent purposes. In this policy, the term "cookies" covers all of them.

Data controller

The controller responsible for the data collected through cookies is:

  • NEXUSVIBE SL (trading as FitConnect Pro).
  • Tax ID (NIF): B70966650.
  • Registered office: C/Casas de Miravete Nº 22A, Planta 4, Oficina 4, 28031 Madrid, Spain.
  • Commercial Registry of Madrid, Volume 46502, Folio 135, Section 1, Sheet M-816510.
  • Privacy email: privacidad@fitconnect.pro.
  • Company contact: gestion@nexusvibe.net.

Categories of cookies we use

FitConnect Pro is a B2B platform for personal trainers, strength coaches and dietitians and their clients (training plans, nutrition plans, progress tracking, trainer-client chat and client-to-trainer payments). To deliver these services we use the following categories of cookies:

  • Strictly necessary cookies: essential for the site to work and to provide the services you request. They include the authentication session cookie (Supabase), cross-site request forgery (CSRF) protection and timezone detection. They cannot be disabled without breaking core functionality and do not require consent.
  • Payment cookies: set by Stripe during the payment flow (client-to-trainer payments and subscriptions) to prevent fraud and ensure secure transactions. They are strictly necessary for payment functionality. We never store full card numbers.
  • Preference (functional) cookies: remember choices such as language or display settings. They improve your experience but are not essential.
  • Analytics cookies: collect usage data (pages visited, session duration, traffic sources) via Google Analytics to help us understand and improve the platform. They are only set with your consent.
  • Third-party cookies (embedded content): videos that trainers embed from YouTube or Vimeo may set third-party cookies on playback.

Detailed list of cookies

The table below lists the main cookies used on FitConnect Pro. As these rely on third-party services that evolve over time, the list is indicative and may vary; name, purpose, duration and category are shown for each:

  • sb-<project>-auth-token — Supabase — keeps you signed in and authenticates your identity — session duration (refreshed while the session is active) — Strictly necessary.
  • csrf / __Host-csrf — FitConnect Pro — protects forms against cross-site request forgery (CSRF) — session — Strictly necessary.
  • timezone — FitConnect Pro — stores your detected timezone so schedules and workout logs display correctly — up to 180 days — Strictly necessary.
  • NEXT_LOCALE — FitConnect Pro — remembers your preferred language — up to 1 year — Preference (functional).
  • __stripe_mid — Stripe — device identifier for payment fraud prevention — 1 year — Strictly necessary (payment).
  • __stripe_sid — Stripe — session identifier for fraud prevention during checkout — 30 minutes — Strictly necessary (payment).
  • _ga — Google Analytics — distinguishes users for usage statistics — up to 2 years — Analytics (consent required).
  • _ga_<id> / _gid — Google Analytics — maintains session state and distinguishes users — 2 years / 24 hours — Analytics (consent required).
  • YouTube cookies (e.g. VISITOR_INFO1_LIVE, YSC, CONSENT) — Google/YouTube — set when you play a trainer-embedded video — up to 2 years / session — Third party (embedded content).
  • Vimeo cookies (e.g. vuid) — Vimeo — set when you play a trainer-embedded video — up to 2 years — Third party (embedded content).

Payment cookies (Stripe)

Client-to-trainer payments, trainer subscriptions and payouts via Stripe Connect are processed through Stripe. Stripe sets the __stripe_mid and __stripe_sid cookies to prevent fraud and secure transactions. These cookies are strictly necessary in order to pay on the platform and, given their security function, do not depend on your prior consent.

Stripe acts as an independent controller for payment data. You can read its policy at https://stripe.com/privacy. FitConnect Pro never stores full card numbers.

Analytics cookies (Google Analytics)

We use Google Analytics to understand how the platform is used and to improve it. These cookies are only set if you give your consent through the cookie banner. If you do not give or you withdraw consent, analytics cookies will not load.

You can review Google's privacy policy at https://policies.google.com/privacy. To opt out of Google Analytics across all websites, you can install the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout.

Embedded third-party content (YouTube and Vimeo)

Trainers may add videos hosted on YouTube or Vimeo (for example, exercise demonstrations). When a page includes one of these videos and you play it, the relevant provider may set its own third-party cookies, over which FitConnect Pro has no control.

You can review their policies at https://policies.google.com/privacy (YouTube) and https://vimeo.com/privacy (Vimeo). To limit these cookies, manage your browser settings or refrain from playing the embedded content.

Legal basis

Strictly necessary and payment cookies are set on the basis of legitimate interest and performance of the contract (Art. 6(1)(b) and 6(1)(f) GDPR), as they are indispensable to deliver the requested service, and are exempt from the consent requirement of Art. 22(2) LSSI-CE.

Analytics, non-essential preference and embedded third-party cookies are set only with your consent (Art. 6(1)(a) GDPR and Art. 22(2) LSSI-CE), which you can withdraw at any time.

How to manage or withdraw your consent

When you first access FitConnect Pro we show a cookie banner from which you can accept or reject non-essential cookies. You can change your choice at any time as follows:

  • Reopening the cookie settings panel from the banner or the corresponding link on the site.
  • Clearing stored cookies and adjusting preferences in your browser settings.
  • Configuring your browser to block or delete cookies: Chrome (https://support.google.com/chrome/answer/95647), Firefox (https://support.mozilla.org/en-US/kb/cookies), Safari (https://support.apple.com/guide/safari/sfri11471/mac) and Edge (https://support.microsoft.com/en-us/microsoft-edge).
  • Installing the Google Analytics Opt-out Browser Add-on to exclude yourself from analytics across all sites.

Consequences of disabling cookies

Blocking strictly necessary or payment cookies may prevent you from signing in, processing payments, or the site from functioning correctly. Rejecting analytics or third-party cookies does not affect the platform's essential functions.

International transfers

Some of our providers (for example, Stripe, Google or Vercel) may process data outside the European Economic Area (EEA). Where this happens, transfers rely on the EU-US Data Privacy Framework and/or the Standard Contractual Clauses approved by the European Commission. Data managed by Supabase is hosted in EU data centres.

Updates to this policy

We may update this Cookie Policy to reflect changes in the cookies we use or for legal, regulatory or operational reasons. The date at the top indicates the last revision. We recommend reviewing it periodically.

Contact

For any questions about our use of cookies you can write to privacidad@fitconnect.pro. For company matters: gestion@nexusvibe.net. For general support: support@fitconnect.pro.

NEXUSVIBE SL — C/Casas de Miravete Nº 22A, Planta 4, Oficina 4, 28031 Madrid, Spain. This policy is governed by Spanish law and subject to the courts of Madrid.