Cookie Policy
Last updated: July 29, 2026 · Version 2026-07-29
Last updated: July 29, 2026
Policy version: 2026-07-29
This Cookie Policy explains how Atlas Method (“Atlas Method,” “we,” “us”), operated by Atlas Labs, uses cookies and similar technologies on our websites and applications (the “Service”). It should be read together with our Privacy Policy.
1. WHAT COOKIES AND SIMILAR TECHNOLOGIES ARE
Cookies are small text files placed on your device when you visit a website. We also use similar technologies such as localStorage, sessionStorage, pixels, and scripts that store or access identifiers on your device. In this policy, “cookies” includes those similar technologies.
2. WHY WE USE THEM
We use cookies to:
• Keep the Service secure and working (for example, authentication and fraud prevention);
• Remember choices needed to provide the Service you request (for example, language and privacy preferences);
• Support checkout and payment continuity;
• Measure and improve the Service when you allow analytics;
• Remember optional interface preferences when you allow functional cookies; and
• Support campaign measurement and marketing technologies when you allow marketing cookies.
3. YOUR CHOICES
We use a global opt-in approach for optional cookies. Analytics, Functional, and Marketing technologies remain off until you choose to enable them.
You can:
• Accept All;
• Reject Non-Essential; or
• Customize categories.
Scrolling, continuing to browse, or closing the banner without selecting an option is not consent. You can change or withdraw your choices at any time through Cookie Preferences (footer, Settings when signed in, this page, and the Privacy Policy).
4. CATEGORIES
• Strictly Necessary — always active. Required for core Service features, security, and storing your privacy choices. These cannot be switched off through our preference tools.
• Analytics — optional. Helps us understand how the Service is used so we can improve performance and usability. Off until you consent.
• Functional — optional. Enables enhanced preferences and optional features that are not required for the core Service. Off until you consent.
• Marketing — optional. Allows advertising, campaign measurement, and personalized marketing technologies where used. Off until you consent. Also disabled when your browser sends a Global Privacy Control (GPC) signal.
5. STRICTLY NECESSARY TECHNOLOGIES
• Supabase Auth session (Supabase) — Maintain authenticated session. Storage: localStorage (sb-*-auth-token style). Keys: sb-*-auth-token. Typical duration: Session / refresh token lifetime.
• Privacy preference record (Atlas Method) — Store versioned consent choice. Storage: document.cookie. Keys: atlas_consent. Typical duration: ~180 days.
• Privacy preference localStorage mirror (Atlas Method) — Backup of consent choice when cookies cannot be set (e.g. http IP hosts). Storage: localStorage. Keys: atlas_consent. Typical duration: Until cleared or withdrawn.
• Preferred locale (Atlas Method) — Language selection for the requested service. Storage: localStorage. Keys: atlas.preferred_locale. Typical duration: Until changed.
• Pending signup legal consents (Atlas Method) — Stash terms acceptance across email verify / OAuth. Storage: sessionStorage. Keys: atlas_pending_signup_consents. Typical duration: Session.
• Promo checkout continuity (Atlas Method) — Remember applied promo / anon promo session through checkout. Storage: localStorage. Keys: atlas_applied_promo_code, atlas_promo_anon_session. Typical duration: Until cleared.
• Active workout / logbook drafts (Atlas Method) — Resume in-progress sessions and offline set drafts. Storage: sessionStorage / localStorage. Keys: atlas.activeSessionId, atlas:logbook:draft:*. Typical duration: Session / until cleared.
• Stripe Checkout / Customer Portal (Stripe) — Subscription and eBook payment on Stripe-hosted pages. Storage: Stripe-hosted cookies (checkout.stripe.com). Keys: (Stripe-hosted). Typical duration: Provider-controlled.
• Google Fonts stylesheet (Google) — Load Inter, Space Grotesk, Noto Sans Arabic for UI typography including RTL. Storage: Browser cache / network request to fonts.googleapis.com. Keys: n/a. Typical duration: Cache-controlled by provider.
6. ANALYTICS TECHNOLOGIES
• Google Analytics 4 (gtag) (Google) — Page and event analytics; product usage measurement. Storage: Third-party / first-party GA cookies after script load. Keys: _ga, _ga_*, _gid. Typical duration: Up to ~2 years (provider-controlled).
• First-party product analytics (track) (Atlas Method) — Product funnel and feature usage events stored in analytics_events. Storage: sessionStorage queue + server ingest. Keys: atlas_analytics_session, atlas_analytics_queue. Typical duration: Session.
• Client experiment assignment (Atlas Method) — Sticky A/B variant assignment (when assignExperiment is used). Storage: document.cookie. Keys: atlas_exp_v1. Typical duration: 6 months.
7. FUNCTIONAL TECHNOLOGIES
• Brand accent theme (Atlas Method) — Remember blue/pink brand accent. Storage: localStorage (+ profile when logged in). Keys: atlas.brand_theme. Typical duration: Until changed.
• Sidebar UI state (Atlas Method) — Remember sidebar open/collapsed. Storage: document.cookie + localStorage. Keys: sidebar_state, atlas.sidebarCollapsed. Typical duration: 7 days / until changed.
• Planner default view (Atlas Method) — Remember calendar default view. Storage: localStorage. Keys: atlas-planner-default-view. Typical duration: Until changed.
• Coach thread id (Atlas Method) — Resume coach conversation thread. Storage: localStorage. Keys: atlas.coach.thread.{userId}. Typical duration: Until changed.
• Skip calorie setup prompt (Atlas Method) — Dismiss Self-Directed dashboard calorie prompt for the session. Storage: sessionStorage. Keys: atlas_sd_skip_calorie_setup. Typical duration: Session.
8. MARKETING TECHNOLOGIES
• Campaign attribution snapshot (Atlas Method) — Persist UTM / promo / influencer touch for funnel attribution. Storage: localStorage. Keys: atlas.attribution.v1. Typical duration: Until cleared or withdrawn.
9. THIRD-PARTY PROVIDERS
Depending on your choices and how you use the Service, third parties may process data via cookies or similar technologies, including:
• Google — Google Analytics (only after Analytics consent, when configured) and Google Fonts used to render typography;
• Stripe — payment processing on Stripe-hosted Checkout or Customer Portal pages after you start a payment flow.
As of our last technology audit (2026-07-29), the Atlas Method web application does not implement Meta, TikTok, Snapchat, Hotjar, Microsoft Clarity, PostHog, or similar advertising or session-replay pixels.
Third parties may set their own cookies subject to their policies. We encourage you to review Google’s and Stripe’s privacy documentation when those services are used.
10. DURATION
• Privacy preference cookie (atlas_consent): about 180 days, then you may be asked again.
• First-party analytics session keys: browser session only.
• Google Analytics cookies (when enabled): typically up to about 24 months, subject to Google’s settings.
• Other keys: see the durations listed for each technology above.
Some provider cookies cannot be deleted by us after you withdraw consent and may remain until they expire or you clear them in your browser.
11. HOW TO CHANGE OR WITHDRAW PREFERENCES
Open Cookie Preferences from the site footer, Settings, this Cookie Policy, or the Privacy Policy. Changing a category updates your stored preference immediately, stops future optional collection for that category where technically possible, and disables related scripts. Where you are signed in, we may also sync your preference to your account so it can apply across devices.
12. BROWSER CONTROLS
Most browsers let you block or delete cookies and site data. If you block all storage, features such as sign-in, checkout, language preference, or workout recovery may not work correctly.
13. GLOBAL PRIVACY CONTROL (GPC)
If your browser sends a Global Privacy Control signal, we treat that as a request to disable marketing and related data-sharing technologies for cross-context advertising measurement. We will not silently override that signal with an older marketing preference. GPC does not turn off Strictly Necessary processing required to provide the Service.
14. CALIFORNIA “DO NOT SELL OR SHARE” CONTROL
We do not sell personal information for money. When marketing technologies are used with your consent, they may involve disclosures that some privacy laws treat as a “sale” or “share” for cross-context behavioral advertising. California residents (and others who wish to use the control) can select “Do Not Sell or Share My Personal Information” in the footer to disable Marketing technologies. You can also Reject Non-Essential or turn Marketing off in Cookie Preferences.
15. POLICY UPDATES
We may update this Cookie Policy from time to time. The “Last updated” date and policy version above will change when we do. If we make material changes to how we use optional cookies, we may ask you to make a new choice.
16. CONTACT
Questions about this Cookie Policy or your privacy choices: [email protected].
Operator: Atlas Labs. Governing law reference for the Service generally: State of Delaware, United States of America (see also our Terms of Service).