Cookie & Technology Notice
Ball Players Fitness uses only technologies necessary for requested accounts, commerce, security, forms, and privacy choices. Analytics and advertising are not currently used.
| Technology | Purpose | Duration | When used |
|---|---|---|---|
| bp_web_auth | Ball Players verified-email session | Session and refresh lifecycle | Requested account use only |
| bp_signup_intent / bp_password_recovery | Confirmation preferences and recovery security | Short-lived; cleared after completion or expiry | Requested registration or password recovery |
| bp_customer_oauth | Legacy login security | 10 minutes | Legacy Shopify sign-in compatibility only |
| bp_fitness_session | Authenticated member session | 30 days | Requested account use only |
| bp_fitness_admin | Staff-only session | 8 hours | Authorized staff use only |
| Shopify account and checkout cookies | Customer accounts, cart, checkout, orders, fraud prevention, and consent | Varies by Shopify cookie | Requested Shopify surfaces |
| Cloudflare Turnstile signals/storage | Automated-abuse protection | Varies; no pre-clearance requested | Relevant submitted forms only |
| bp_privacy_choice | Remembers necessary-only and voluntary opt-out choices | 1 year | After a visitor makes a privacy choice |
Necessary-only default
No application cookie is set on a first public page view. A necessary record is stored after you choose privacy settings. Requested login, cart, checkout, staff access, and form-security functions may set or use necessary technologies without nonessential consent.
Nonessential categories
Analytics and marketing or advertising storage are locked off because no such technology is installed. Future analytics, pixels, embedded services, or persistent storage must be added to the technology registry and cannot load until correctly categorized and consented.
Shopify and checkout
Shopify provides customer accounts, checkout, order, subscription, and privacy-consent functions through Ball Players branded domains. Its exact cookies vary by the Shopify surface and requested action. Shopify maintains its current cookie inventory at shopify.com/legal/cookies. The storefront sends privacy choices through Shopify's public Customer Privacy API, and checkout remains under the ballplayersfitness.com site root for consent continuity.
Cloudflare Turnstile
Turnstile loads only on forms that need automated-abuse protection. Its signals and any storage are treated as necessary security technology. Ball Players Fitness does not enable Turnstile pre-clearance; a clearance cookie is not requested by the site.
Manage your choice
Open Privacy choices from any site footer. You can renew a necessary-only choice, record a voluntary sale/share opt-out, and see whether Global Privacy Control was detected. Removing browser cookies may cause the first-visit notice to appear again.
The owner has approved the current service scope. This does not represent independent legal or clinical review. The versioned agreement presented before payment controls the selected service; enrollment availability is shown on each offer page.