Mazinga

Cookie and Similar Technologies Policy

Version 1.1Effective: 8 October 2026

1. About this Policy

This Cookie and Similar Technologies Policy explains how Mazinga Climbing Ltd ("Mazinga", "we", "us" or "our") uses cookies, browser storage and similar technologies when you use Mazinga. This Policy should be read together with our Privacy Notice.

Mazinga Climbing Ltd

Company number: 17388779

71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom

Email: privacy@mazinga.app

2. What are cookies and similar technologies?

Cookies are small pieces of information that websites can store on your device and access again later. Web applications can also use other technologies that perform similar functions, including local storage, session storage, scripts, tags, security technologies, and other forms of browser or device storage. In this Policy, we refer to these collectively as storage technologies.

Mazinga primarily uses browser storage rather than relying on traditional first-party cookies for its core application functionality.

3. How Mazinga currently uses storage technologies

Mazinga currently uses storage technologies for limited purposes connected with providing and securing the service. These include keeping you signed in, maintaining authentication sessions, remembering application choices you have made (such as selected training plans, workout-card display state and timer-beep volume), temporarily retaining the document versions you accepted during signup while account confirmation completes, maintaining certain timer state while you navigate through the application, supporting sign-in and account-security functions, and preventing automated or abusive activity.

Mazinga does not currently use storage technologies for behavioural advertising, cross-site advertising tracking or third-party behavioural analytics. Mazinga's user-facing Analytics feature is separate from tracking analytics. It calculates training statistics from information already stored in your Mazinga account and does not require a third-party analytics provider or analytics-tracking cookie.

4. Essential authentication storage

Supabase authentication

Purpose: To authenticate your account, maintain your login session and provide account-security functionality.
Provider: Supabase
Type: Browser local storage and related authentication mechanisms
Duration: Until you sign out, the authentication session expires or is revoked, Mazinga clears the session, or you clear the relevant browser data.
Optional?: No — required to provide an authenticated Mazinga account.

5. Selected training plan preference

mazinga_selectedPlanId

Purpose: To remember which of your active training plans you selected so that Mazinga can continue showing the relevant plan when you navigate through or return to the application.
Provider: Mazinga
Type: Local storage
Duration: Until the stored selection is replaced, the relevant plan is no longer available, you clear your browser storage, or Mazinga removes the stored preference.
Optional?: This storage supports an application preference that you actively choose. Removing it does not delete the training plan itself.

6. Workout timer storage

mazinga_workout_timer

Purpose: To allow an active workout timer to continue functioning correctly while you navigate between different parts of Mazinga. Stored information may include the exercise or timer name, current timer phase, sets and repetitions, rest periods, remaining time, and whether the timer is paused.
Provider: Mazinga
Type: Session storage
Duration: Normally for the relevant browser session or until the timer state is removed or replaced.
Optional?: Used when you choose to use the workout-timer functionality. If it is unavailable, the timer may not be able to continue correctly when navigating between pages.

7. Workout-card display preference

mazinga_workout_collapsed

Purpose: To remember which workout cards you have collapsed on the Daily page. The stored value is a mapping of relevant scheduled-workout identifiers to their collapsed display state. It is a display preference, not a copy of the workout contents.
Provider: Mazinga
Type: Browser local storage
Duration: The preference remains until it is updated, removed by Mazinga, or you clear the relevant browser storage. You can expand and collapse workout cards again in the app.
Optional?: This storage supports a display preference that you actively choose.

8. Workout-timer beep-volume preference

mazinga_timer_beep_volume

Purpose: To remember your chosen volume for in-app workout-timer sounds. The saved value is a number from 0 to 100; it does not change your device's own volume or mute setting.
Provider: Mazinga
Type: Browser local storage
Duration: The preference remains until you change it, Mazinga removes it, or you clear your browser storage. You can change the volume in the workout-timer controls.
Optional?: This storage supports a preference that you actively choose.

9. Pending legal-acceptance information

mazinga_legal_pending

Purpose: During email/password registration, Mazinga can temporarily store the accepted Terms of Use and Training & Safety Disclaimer version numbers so that acceptance can be recorded after the email confirmation creates an authenticated session. It does not itself replace the server-side record of legal acceptance.
Provider: Mazinga
Type: Browser local storage
Duration: The value is ordinarily removed once the corresponding acceptance is recorded. If registration is not completed, it may remain in browser storage until cleared or overwritten. Clearing it may require you to acknowledge the required documents after signing in.
Optional?: Used only during registration.

10. Security and bot-protection technologies

Mazinga uses Cloudflare Turnstile on certain authentication and security-sensitive forms to help protect the service from bots, automated abuse and malicious activity. Turnstile runs security checks within the browser and may process or access technical information necessary to determine whether an interaction appears legitimate. Depending on Cloudflare's service configuration, Cloudflare security technologies may use browser storage, cookies or similar technical mechanisms where necessary to provide the security service.

Cloudflare — purpose: bot detection, abuse prevention, account security, and protection of Mazinga's authentication and other sensitive functions. This storage is required where the security check is used for the relevant function. Blocking it may prevent you from completing actions such as creating an account, signing in, or requesting a password reset. Mazinga does not use Cloudflare Turnstile for advertising purposes.

11. Google sign-in

If you choose Sign in with Google, you interact with Google's authentication service. Google may use cookies or similar technologies on its own services as part of the authentication process. Mazinga does not control the storage technologies that Google uses on Google's own websites or services. Using Google authentication is optional where another supported sign-in method is available.

12. Privacy-choice storage

Mazinga does not currently use optional behavioural analytics or advertising technologies that require an in-app analytics consent choice. Accordingly, Mazinga does not need to store an analytics-consent preference solely for the application's built-in Analytics feature.

If Mazinga introduces a non-essential technology in the future that requires a privacy choice, we may store that choice on your device so that the service can respect it. For example, a future preference record might be used to remember whether a user has accepted or rejected an optional technology. Any such use would be documented before the technology is enabled.

13. Mazinga Analytics and tracking analytics

Mazinga includes an Analytics page that displays training information calculated from your Mazinga records. Depending on the feature, these calculations may include information such as exercises completed, time logged, category breakdowns, active training days, Rate of Perceived Exertion averages, scheduled volume over time, and exercise progression information. These calculations are part of the Mazinga training service. They are produced from information already stored in your Mazinga account and do not require a third-party analytics provider, analytics cookie or behavioural tracking identifier.

Mazinga does not currently use optional user-tracking analytics technologies. If we introduce a separate analytics or tracking technology in the future, we will assess how it works before deployment and update this Policy. Where the technology requires consent, it will not be enabled unless and until the required choice has been obtained.

14. Advertising and marketing technologies

Mazinga does not currently use behavioural advertising cookies, advertising pixels, cross-site advertising trackers, social-media advertising trackers, or technologies intended to create advertising profiles based on your Mazinga activity. If this changes, we will update this Policy and introduce the appropriate controls before using those technologies.

15. Embedded third-party content

Mazinga may in the future display or link to content provided by third parties. Some embedded third-party content can cause the third party to store or access information on your device. Where such technologies require a choice before loading, Mazinga will seek the appropriate choice before enabling them. Where possible, we will configure third-party content in a privacy-preserving manner.

16. Do you have to accept storage technologies?

Certain technologies may be used without optional consent where they meet a specific exception under applicable UK law (for example, when strictly necessary to provide a requested online service). Some storage used to adapt how Mazinga looks or works in line with your preferences may qualify for a different exception, which carries its own transparency and objection requirements. These exceptions are assessed by purpose; not every preference is automatically "strictly necessary". For example, Mazinga cannot provide a normal signed-in account if the authentication system cannot maintain your session. Mazinga does not currently ask you to consent to a separate analytics provider because no such provider is used — the built-in Analytics feature calculates information from your Mazinga account records and is part of the requested service.

Where Mazinga introduces a storage technology that requires your consent, that technology will not be enabled merely because you visit Mazinga, create an account, agree to the Terms of Use, acknowledge the Privacy Notice, or continue browsing. You will be given a separate choice where required.

17. Managing future optional technologies

Mazinga does not currently provide an optional analytics toggle because it does not currently use an optional analytics-tracking provider. If Mazinga introduces optional storage or tracking technologies in the future, we will provide suitable controls where required. Depending on the technology, those controls may allow you to accept or reject optional technologies, choose between different optional purposes, and change your choice later. Essential technologies required to provide or secure Mazinga cannot generally be disabled through Mazinga's own privacy controls. You may be able to block them through your browser, but doing so may prevent parts of Mazinga from working.

18. Browser controls

Most browsers allow you to inspect, remove or restrict cookies and browser storage. You can also normally clear local storage and session storage through your browser's privacy or site-data settings. For preferences stored by Mazinga, you can also change the relevant selected plan, workout-card state or workout-timer volume through the app. The exact controls depend on the browser and device you use. Deleting Mazinga's browser storage may sign you out, remove remembered application preferences, clear active timer state, or cause security or authentication flows to restart. Deleting browser storage does not necessarily delete information stored within your Mazinga account on our servers. For information about deleting your account or personal information, please see our Privacy Notice.

19. Changes to our use of storage technologies

The technologies used by Mazinga may change as the service develops. We may add new technologies, remove technologies, change providers, change how long information is stored, or introduce new optional features. We will update this Policy when necessary. If we introduce a new use that requires consent and your existing choice does not cover that purpose, we will ask you to make a new choice before enabling it.

20. Changes to this Policy

We may update this Cookie and Similar Technologies Policy from time to time. The version and effective date at the top of this page will show when the current Policy took effect. Material changes may also be communicated through Mazinga where appropriate.

21. Contact us

If you have questions about Mazinga's use of cookies, browser storage or similar technologies, contact:

Mazinga Climbing Ltd

Company number: 17388779

71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom

Email: privacy@mazinga.app

Last updated: 8th of October, 2026

Cookie and Similar Technologies Policy — Mazinga