Cookie Policy
Last updated: 08.26.2026
1. Introduction
Goodfit Limited (“we”, “us”, or “our”) operates https://www.goodfit.io. This Cookie Policy explains what cookies are, which cookies we use, why we use them, and how you can control them.
This Cookie Policy applies to our website at www.goodfit.io and our Goodfit application at app.goodfit.io, including associated authentication services.
This policy should be read alongside our Privacy Policy.
2. What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work, improve user experience, and provide information to website owners.
Cookies can be:
- First-party — set by us directly on our domain
- Third-party — set by external services we use
- Session cookies — deleted when you close your browser
- Persistent cookies — remain on your device for a set period
3. Categories of Cookies We Use
We group cookies into the following categories:
3.1 Strictly Necessary / Essential
These cookies are required for the website and application to function, including security and user authentication. They cannot be switched off.
| Cookie | Provider | Purpose | Duration |
| __cf_bm | Cloudflare | Bot detection and protection against malicious traffic | 30 minutes |
| workos_oidc_session | WorkOS | Maintains the user’s authentication session | Session |
| workos_oidc_session_legacy | WorkOS | Maintains authentication session for legacy compatibility | Session |
| workos-has-session | WorkOS | Records that an authenticated WorkOS session exists | Approx. 13 months |
| workos-session | WorkOS | Maintains the user’s authenticated session | Approx. 13 months |
| wos-session | WorkOS | Maintains authentication and user management session state | Approx. 13 months |
3.2 Functional
These cookies allow the website to remember choices you make and provide enhanced, personalised features. They may be set by us or by third-party providers.
| Cookie | Provider | Purpose | Duration |
| GF_v002_cookie_level1 | Goodfit | Cookie consent preferences | 2 years |
| GF_v002_cookie_level2 | Goodfit | Cookie consent preferences | 2 years |
| GF_v002_cookie_level3 | Goodfit | Cookie consent preferences | 2 years |
| GF_v002_cookie_policy | Goodfit | Records cookie policy and consent status | 2 years |
| authTokenId | HelpHero | Maintains authentication and session state for HelpHero functionality | Approx. 13 months |
3.3 Analytics
These cookies help us understand how visitors interact with our website and application. Information collected is used to monitor usage and improve our service.
| Cookie | Provider | Purpose | Duration |
| _ga | Google Analytics — distinguishes visitors | Approx. 13 months | |
| _ga_EMB4MB9B5V | Google Analytics — maintains and measures sessions | Approx. 13 months | |
| _ga_EXVLJ0H5S5 | Google Analytics — maintains and measures sessions | Approx. 13 months | |
| ph_phc_*_posthog | PostHog | Product analytics, including visitor, device and session identification | 1 year |
3.4 Marketing / Targeting
These cookies are used to understand visitor engagement, identify website visitors and measure marketing effectiveness.
| Cookie | Provider | Purpose | Duration |
| _gcl_au | Conversion tracking and measurement | Approx. 3 months | |
| _reb2bgeo | RB2B | Stores visitor geolocation for identification and matching | 20 days |
| _reb2bloaded | RB2B | Prevents duplicate script executions | 1 second |
| _reb2bref | RB2B | Visit attribution — stores referring URL | 15 days |
| _reb2bsessionID | RB2B | Active session management | 30 minutes |
| _reb2buid | RB2B | Persistent visitor identification | 360 days |
| _reb2bfxf | RB2B | Internal identification framework | 1 month |
| _reb2btd | RB2B | Identity resolution | 1 month |
| _reb2bli | RB2B | Session-to-identity linking | 1 month |
| _reb2bresolve | RB2B | Temporary identity resolution buffer | 2 days |
| _reb2butk | RB2B | Long-term cross-session identification | 1 year |
About RB2B: RB2B is a visitor identification platform. These cookies are set under our domain and are used to identify and understand visits to our website. They do not directly store information such as names or email addresses within the cookies themselves.
4. Legal Basis for Processing (EU/UK)
Where we are subject to the EU General Data Protection Regulation (GDPR) or UK GDPR, we rely on the following legal bases:
- Strictly necessary cookies: no consent required — these are necessary to provide the service you have requested
- Functional cookies: consent, or legitimate interest where applicable
- Analytics cookies: legitimate interest (Snitcher); consent for other analytics tools
- Marketing cookies: consent
If you are based in the EU or UK, you can withdraw consent at any time using our cookie preference centre (see Section 6).
5. California Residents (CCPA / CPRA)
If you are a California resident, you have the right to:
- Know what personal information is collected about you
- Know whether your personal information is sold or disclosed, and to whom
- Opt out of the sale or sharing of your personal information
- Request deletion of your personal information
- Not be discriminated against for exercising your privacy rights
We do not sell personal information. To exercise your rights, contact us at privacy@goodit.io.
6. How to Control Cookies
Cookie settings
You can review and update your cookie preferences at any time using the cookie settings panel available on our website.
Browser settings
You can set your browser to refuse all or some cookies. The links below explain how:
Please note that disabling cookies may affect the functionality of this and other websites.
Opt-out links for specific providers
- Snitcher: https://www.snitcher.com/opt-out/
- RB2B: Contact us at privacy@goodit.io to opt out of RB2B tracking
7. Changes to This Policy
We may update this Cookie Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Where changes are material, we will notify you via an on-site notice.
8. Contact Us
If you have questions about this Cookie Policy or how we handle your data, please contact us at privacy@goodit.io
Goodfit Limited. Arquen House, 4-6 Spicer Street, St. Albans, England, AL3 4PQ