Cookie Policy
Version 1 · In force from 27 October 2026
RepDesk sets exactly one cookie of its own, and it only records the answer you gave to the cookie banner. This page explains that cookie, the ones our sign-in and analytics providers set, and the other things RepDesk keeps on your device so it can work offline.
1. The one cookie we set
| Name | What it does | Lifetime |
|---|---|---|
repdesk_consent | Remembers whether you accepted or rejected analytics cookies, so we do not ask again on every page. | 365 days |
Its value records a version, your answer, and when you gave it — nothing else. No identifier, nothing about who you are. It is set with the Secure flag over HTTPS and SameSite=Lax, and it is shared across repdesk.co.in and app.repdesk.co.in so that answering once covers both.
2. The two categories
Essential — always on, never asked about
These keep the site and your sign-in working. Without them RepDesk cannot function, so there is nothing to consent to. They cover your sign-in session, which workspace you are looking at, the offline cache that lets the counter keep working, and the consent cookie itself.
Sign-in session cookies are set by our authentication provider when you log in. They identify your session, not your behaviour.
Analytics — off until you say yes
We use Mixpanel to see which pages people visit, which buttons they press and how long things take, so we know what to improve. Mixpanel sets its own cookie, but only after you accept. Until you answer the banner, no analytics request leaves your browser and no analytics cookie exists.
There is no advertising category, because there is no advertising in RepDesk. We run no ad networks, no retargeting pixels and no social media trackers, and we never sell what we measure.
3. What analytics actually receives
Deliberately little: counts, enumerated values, true-or-false flags, and an opaque identifier that is not your name or your email. We never send names, phone numbers, email addresses, amounts, notes, plan names or invitation codes.
There is no session recording, and nothing that captures everything you click by default. Analytics data is held in the European Union. Deleting your RepDesk account also deletes your analytics profile.
4. Changing your mind
Use “Cookie settings” in the footer of this site, or Settings → Privacy & Cookies inside the app. One click, no email required — withdrawing is exactly as easy as accepting was.
When you withdraw, we clear the analytics cookie from your browser and stop sending. You can also clear cookies in your browser settings, though that will make us ask again.
5. Signals we respect without being asked
- Global Privacy Control. If your browser sends a GPC signal, we treat it as a refusal. We do not ask, and we do not load analytics.
- Automated browsers. Bots, crawlers and test automation are never tracked and never shown the banner.
6. What else is stored on your device
Cookies are not the only thing a web app keeps locally, and it would be misleading to describe only those. RepDesk also uses your browser's own storage:
| What | Why |
|---|---|
| Which workspace you are viewing | So the right gym loads when you return |
| Your analytics choice, and whether you opted out | To honour it without asking again |
| An unsubmitted signup draft — gym name, address and phone | So you do not lose your setup if the page reloads mid-signup. Cleared once signup finishes. |
| Interface preferences, such as a collapsed sidebar | So RepDesk looks the way you left it |
| Your session identifier | To keep you signed in across tabs |
| A cached copy of your gym's records | So the front desk keeps working when the internet drops. This includes member names, phone numbers, email addresses and addresses. |
That last one deserves attention. RepDesk works offline by keeping a copy of your member list in the browser on every device you sign in from, including a shared front-desk computer. Signing out clears it. If other people can reach that machine, this is worth knowing about.
7. More
Who receives data and where it goes is set out in our Privacy Policy and on the Sub-processors page. Questions to privacy@repdesk.co.in.