Cookies & Local Storage

This statement explains what Xoof stores on your device and why. It covers this site (xoof.me) and the Xoof app, both operated by FOOX LTD.

This marketing site

xoof.me sets no cookies at all. It is a set of static pages. There is no analytics script, no advertising pixel, no social-media embed, no chat widget, and no third-party font or script request — the fonts are served from our own domain specifically so that visiting this site does not disclose your IP address to anyone else.

The Xoof app

The app sets a small number of strictly necessary cookies once you sign in:

Name	Purpose	Type
xoof_access_token	Keeps you signed in. HttpOnly, so it cannot be read by scripts.	Strictly necessary
xoof_csrf_token	Protects against cross-site request forgery — it stops another site making changes to your account on your behalf.	Strictly necessary

Signing out clears them. Because these exist solely to deliver the service you asked for, they do not require consent — but you can of course refuse or delete cookies in your browser settings. If you block these, you will not be able to sign in.

Local and offline storage

Xoof is an offline-capable app, so it also stores data on your own device using browser storage (local storage, IndexedDB and a service-worker cache). This is used to:

• keep your logs readable and let you record new ones while you have no signal, syncing when you reconnect;
• hold unsent voice recordings so a captured session is not lost if the app closes;
• remember interface preferences such as your units and which side of the app you were last using.

This information stays on your device and is not a tracking mechanism. Clearing your browser data for the site, or signing out, removes it.

Analytics

We do measure whether Xoof works — for example how many people who sign up go on to log their first workout. Those events are recorded on our own servers, attached to your account, at the moment the action happens. There is no analytics cookie, no device fingerprinting, and no third-party analytics provider receiving your behaviour. The events are included in your data export and are deleted when you delete your account.

Third parties

No third party sets a cookie through Xoof. There is no payment provider in the picture today, because Xoof takes no payments and shows no checkout — see the Refund & Cancellation policy. A checkout will appear when Xoof Premium launches, and we will update this statement then to name the provider and any cookie it sets. Our sub-processors and what each receives are listed in the Privacy Policy.

Contact

Questions about this statement? Email fooxxed@gmail.com.