Cookie Policy
There are four of them, they all do a job, and none of them are for advertising.
Draft notice. This page describes how Coachyn is intended to work and is written in plain language on purpose. It is not yet a finalised legal document and has not been reviewed by counsel. If something here matters to a decision you're making, ask us rather than assuming.
1. The short version
This site sets four cookies. All four exist to make signing in, submitting forms, and remembering your session work. Coachyn also uses a cookie-free Umami analytics script to understand aggregate site usage. There are no advertising cookies, no social media pixels, and nothing that follows you to other sites.
2. What a cookie is here
A cookie is a small piece of text your browser stores for a site and sends back on the next request. Web servers are otherwise forgetful — without one, signing in wouldn't survive clicking a link.
3. The cookies we set
| Name | Purpose | Lifetime |
|---|---|---|
| Coachyn.Auth | Remembers that you're signed in, and carries the tokens the site uses to talk to the Coachyn API on your behalf. HTTP-only, so page scripts can't read it. | Until you sign out, or 30 days if you chose "keep me signed in" |
| .AspNetCore.Antiforgery.* | Protects every form on the site against cross-site request forgery — it's what stops another site submitting a form as you. | The browser session |
| .AspNetCore.Mvc.CookieTempDataProvider | Carries a one-off message across a redirect — for example, showing your name on the confirmation page after the contact form. | Deleted as soon as it's read |
| .AspNetCore.Culture | Set only if you choose a language or region preference. Not currently used. | 1 year |
All of these are strictly necessary: the site cannot do what you asked it to do without them, which is why you aren't asked to consent to them.
4. What we don't use
- No advertising or retargeting cookies.
- No cross-site tracking, and no social media pixels.
- No analytics cookies. Umami analytics runs without setting browser cookies and is used only for aggregate site usage.
5. Third-party requests
This site loads its fonts from Google Fonts. That request reaches Google's servers and includes your IP address and browser details, in the same way any request for an image or a stylesheet would. It does not set a cookie.
The Umami analytics script is served from umami.samhaider.dev. It records pageview
information such as the page URL, referrer, browser language, screen size, and page title, and it
does not set a cookie.
The rest of the page — stylesheet, local script, images, and logo — is served from coachyn.com.
6. Controlling cookies
Every browser lets you view and delete cookies, and block them by site. Look for "Cookies and site data" under privacy settings.
Be aware of the trade-off: block cookies for coachyn.com and you won't be able to stay signed in, and form submissions will be rejected by the antiforgery check. That's not us being awkward — those two cookies are the mechanism.
7. Local storage
The site uses a small amount of browser storage for interface preferences, such as which billing period you last selected on the pricing page. It stays in your browser and is never sent to us.
8. Changes
If the list in section 3 changes, this page changes with it and the date at the top is updated.
9. Contact
Questions: [email protected], or the contact form. Related reading: the Privacy Policy.
Questions about this page? Get in touch.
All policies