Cookie Policy
Last updated September 27, 2026
What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help the site function correctly, remember your preferences, and understand how you use the service. My Barista Trainer uses a small number of cookies for authentication and analytics. Nothing more.
How We Use Cookies
The table below lists every cookie, and every browser-storage item, set by or on behalf of My Barista Trainer.
| Cookie | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| app.mybaristatrainer.com (httpOnly; sent only to /api/auth) | Keeps you signed in between sessions | Essential / httpOnly | 7 days | |
| Google Analytics | Distinguishes unique visitors | Analytics | 2 years | |
| Google Analytics | Stores session state for Google Analytics | Analytics | 2 years | |
| CSRF protection during Google Sign-In | Essential / temporary | Session | ||
| Stores Google Sign-In state | Essential / temporary | Session | ||
| mybaristatrainer.com | Remembers your Accept/Decline choice on this banner | Essential | 365 days | |
| app.mybaristatrainer.com | Renders the app in your chosen light/dark theme before the page loads. Set by the app for signed-in users only (a separate, server-set mechanism from the marketing site's own below). | Preference | 365 days | |
| mybaristatrainer.com (browser storage only, never sent to any server) | Remembers your light/dark theme choice on this marketing site (localStorage, not a cookie) | Preference | No expiry (until cleared) | |
| mybaristatrainer.com (browser storage only, never sent to any server) | Remembers which link or search brought you here (UTM parameters or referrer), so a later signup can credit the right source (sessionStorage, not a cookie) | Marketing attribution | Session (cleared when the tab closes) | |
| mybaristatrainer.com (browser storage only, never sent to any server) | Marks that has already been set this session, so navigating between pages doesn't overwrite it | Marketing attribution | Session (cleared when the tab closes) |
Essential Cookies
Essential cookies are necessary for the app to function. They handle authentication and security. Specifically, refresh_token keeps your session alive between visits, and the Google Sign-In cookies (g_csrf_token, g_state) protect the sign-in flow from cross-site request forgery.
You cannot opt out of essential cookies and continue using the service. We do not use essential cookies for tracking or advertising.
Analytics Cookies
We use Google Analytics (GA4) to understand how visitors use our marketing website (mybaristatrainer.com). This helps us improve the product. GA does not run on the signed-in app (app.mybaristatrainer.com). Its security policy does not permit Google's script to load there. Analytics cookies collect anonymous usage data: pages visited, time spent on a page, and general location (country level). We do not use this data for advertising.
If your browser sends a Global Privacy Control (GPC) signal, analytics cookies are automatically disabled before any data is collected. You can also block analytics cookies using your browser settings or a browser extension (see Your Choices).
EU and UK visitors: We load Google Analytics only after you accept cookies. Declining keeps analytics disabled for your visits. You can also opt out at any time via tools.google.com/dlpage/gaoptout or by enabling Global Privacy Control in your browser, which we always honor.
No Advertising Cookies
We do not use advertising cookies, retargeting pixels, or any third-party marketing trackers on this site. We do not sell or share cookie data with advertisers.
Third-Party Cookies
The only third-party cookies on our site come from Google, for two purposes: Google Analytics (anonymous usage measurement) and Google Sign-In (OAuth authentication). We do not embed social media widgets, ad networks, or other third-party services that set cookies.
Your Choices
You have several ways to control cookies:
- Browser cookie settings: block all cookies, block third-party cookies only, or delete cookies automatically when you close the browser. Every major browser has a privacy settings section where you can manage this.
- Browser extensions: tools like uBlock Origin and Privacy Badger give you fine-grained control over which cookies and trackers are allowed.
- Global Privacy Control (GPC): if your browser or an extension sends a GPC signal, we automatically disable analytics cookies before any data is sent to Google. No action required on your part. Learn more at globalprivacycontrol.org.
- Google Analytics opt-out: you can opt out of Google Analytics specifically by installing the browser add-on at tools.google.com/dlpage/gaoptout.
Note that blocking essential cookies (such as refresh_token) will prevent you from staying signed in.
Cookie Policy Updates
We may update this policy when we add or change services. The "last updated" date at the top of this page will reflect any changes. We will not add new cookies without updating this policy first.
Contact
Questions about our cookie policy? Email support@mybaristatrainer.com.
1238 35th Trl
Cotopaxi, CO 81223
United States