‹ All workouts

Last updated: 24 September 2026. This page explains, in plain English, what Workouts stores about you and why.

What we store

• From Google sign-in: your Google account ID and email address. We use them only to sign you in and to send you account warnings (for example before an inactive account is deleted).
• What you choose: your username and display name.
• What you do: workouts you publish, workouts you save, the sets you log while training, and any reports you make.
• Dates: when you joined, when you were last active, and when you left (if you delete your account).

Who can see it

• Your email and Google account ID are never shown to anyone on the site — not other users, not in admin pages.
• Your username, display name and public workouts are public. Your training stats are private unless you choose to make them public.
• We don't sell your data or use it for advertising.

Cookies

We use one cookie to keep you signed in (for up to 30 days). Google's sign-in button sets its own cookies — see Google's privacy policy.

Where it's kept

The site and its database are hosted by Cloudflare. Data may be stored or processed outside your country.

Deleting your account

• When you delete your account, your email and Google account ID are removed straight away, and you're signed out everywhere.
• For one year we keep your username, display name, joined and left dates, and a one-way scrambled code (a hash) made from your Google account ID. This lets you restore your account if you sign in again, and stops your username being taken by someone else. The hash can't be turned back into your Google ID.
• After one year, all of this is permanently deleted.
• Workouts you published stay on the site, because other people may have saved them. You can hide your name on any of your workouts before or after leaving; after the year is up they are shown as "Anonymous".
• Accounts with no sign-in or activity for one year are deleted the same way. We email you 30 days and 7 days before.

Bans

If an account is banned for breaking the rules, everything is deleted except the hash described above and the ban record, so the same Google account can't sign up again. Bans don't expire.

Your rights

Under New Zealand's Privacy Act 2020 (and the GDPR if you're in the EU), you can ask to see or correct the personal information we hold about you. Contact us at [contact email — to be added].