POLICY VERSION 2026-08-21
Cookie Policy
This policy explains how and why RepVoxr uses analytics cookies and third-party scripts, what data is involved, and how you can control it. We currently use Meta as our analytics provider, and may add other analytics providers over time.
Data controller
RepVoxr is the data controller responsible for your data on this website. For any privacy questions, contact Base44 support.
Third-party providers
Our current analytics provider is Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. Meta acts as an independent data controller for the data it receives. We may from time to time use other analytics providers, each of which acts as an independent controller for the data it receives and has its own privacy policy.
Purposes
- Measuring the performance of our advertising campaigns.
- Attributing conversions and actions to our ads.
- Building audiences for retargeting and lookalike audiences.
- We do not use analytics cookies for personalized advertising based on your activity on this website beyond what is described here.
Data and events transmitted
When analytics cookies are active, the following may be sent to Meta and other analytics providers:
- Page view events (PageView).
- Call-to-action click events (CTA_Click), including a CTA identifier, placement, destination, and plan.
- Audio sample engagement events (AudioSampleStarted, AudioSampleEngaged, AudioSampleCompleted), including the sample name, section, listened seconds, and coverage percentage.
- Technical data such as browser type, device information, IP address (processed by the provider), and the URL visited.
Conversions API (CAPI)
In addition to the browser Pixel, RepVoxr uses Meta's Conversions API (CAPI) to send the following events server-side when analytics consent is granted: PageView, CompleteRegistration, ViewContent, InitiateCheckout, and Purchase. CAPI sends the same events from our servers for more reliable attribution.
Event matching data
When you have granted analytics consent, we may send Meta hashed identifiers (such as a hashed email and a stable external user ID) and the _fbp/_fbc cookies to help match events to your Meta account. These are sent only with your consent and are hashed before transmission.
What we never send to Meta
No workout or exercise names, categories, repetitions, sets, weights, workout history or completion details, photos, fitness progress, streaks, recovery data, or any health-related information is intentionally transmitted to Meta — neither in event parameters nor in URLs. Detailed product and workout analytics remain first-party only.
Cookies and local storage
When analytics scripts load, Meta may set the following first-party cookies and storage on this domain. Other analytics providers may set their own cookies with similar purposes:
- _fbp — set by Meta, persists for a few months, used for advertising.
- _fbc — set by Meta when you arrive via an ad link, used for attribution.
- fr — set by Meta in some configurations.
We also store your consent decision in local storage under the key repvoxr_consent. This is strictly necessary to remember and respect your choice.
Legal basis
The legal basis for loading analytics cookies and third-party scripts and setting their cookies is your consent under GDPR Article 6(1)(a). RepVoxr-controlled advertising analytics, including the Meta Pixel and associated events, are not activated until you provide consent. RepVoxr is hosted on Base44, which may load platform resources and process limited technical information independently as part of operating, securing, supporting, and improving its platform. These platform-level operations are outside RepVoxr's event-tracking controls and are governed by Base44's privacy documentation.
Consent, withdrawal and retention
Your consent is stored for a maximum of 6 months under the current policy version (2026-08-21). You can allow or reject consent from the banner, and withdraw or re-allow it at any time from Cookie settings in the app. Withdrawing consent immediately stops future browser and server-side (CAPI) events and reloads the app to remove already-loaded scripts.
International transfers
Data shared with third-party providers may be transferred to and processed in the United States or other countries outside the European Economic Area. Such transfers rely on appropriate safeguards such as Standard Contractual Clauses.
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and to lodge a complaint with your supervisory authority. You can also exercise your rights directly with the relevant analytics provider.
More information
For Meta's own privacy practices, see Meta's Privacy Policy. Other analytics providers have their own privacy policies, which you can find on their respective websites.