Last updated 2 September 2026.
Essential storage
We use a host-only session cookie for sign-in, security and form protection. It is Secure and HttpOnly in production and uses SameSite=Lax. A short-lived cross-site request-forgery token protects account changes. These technologies are necessary to provide the service and cannot be switched off through an in-site preference control.
Abuse prevention
Cloudflare Turnstile processes limited browser and device signals when an abuse-protected form is used. It is configured for security, not advertising or audience analytics. See the privacy notice for how service providers are used.
Optional cookies
No advertising, profiling or optional analytics cookie is enabled at launch. If this changes, FitProSearch will explain each purpose and obtain any consent required before optional storage is used. You can also delete or block cookies in your browser, although blocking essential storage will prevent sign-in and secure forms from working.