Cookie Policy
What we store on your device, and what you can switch off
Version 1.0 · In effect from 20 August 2026
1. The short version
A few cookies are needed to keep you signed in and to protect forms from abuse. Those are set whatever you decide. Everything else — analytics and advertising measurement — stays switched off until you turn it on, and can be switched off again at any time.
Your choice is stored in a cookie called horsika_consent for 180 days. After that
we ask again. We also ask again if we add a service that was not covered by your earlier
answer — an old choice cannot stand in for one you were never offered.
2. The three categories
| Category | Can you refuse? | What happens if you do |
|---|---|---|
| Strictly necessary | No | Nothing to refuse — without these you could not sign in or submit a form. They are exempt from the consent requirement. |
| Analytics | Yes | The site works exactly the same; we simply learn less about which pages are useful. |
| Marketing | Yes | The site works exactly the same; we cannot tell which advertising brought you here. |
3. Strictly necessary cookies
Always set. No consent is required for these, and they cannot be turned off.
| Name | Set by | Purpose | Expires |
|---|---|---|---|
horsika-session |
Horsika (first party) | Keeps you signed in and holds the state of the current visit | 143200 minutes |
XSRF-TOKEN |
Horsika (first party) | Protects forms against cross-site request forgery | 143200 minutes |
remember_web_* |
Horsika (first party) | Set only if you tick “remember me”, so you stay signed in between visits | 5 years |
horsika_consent |
Horsika (first party) | Remembers this very choice, so you are not asked on every page | 180 days |
4. Analytics cookies
Set only after you agree. Used to understand how the site is used in aggregate.
| Name | Set by | Purpose | Expires |
|---|---|---|---|
_ga, _ga_* |
Google Analytics 4 (Google Ireland Ltd) | Distinguishes visitors and sessions to produce usage statistics | Up to 2 years |
_gid, _gat* |
Google Analytics 4 | Distinguishes visitors; limits the rate of requests | 24 hours / 1 minute |
SL_C_* |
Smartlook (Smartsupp.com, s.r.o., Czech Republic) | Records how the public pages are used, so we can see where a layout confuses people | Up to 1 year |
Google Analytics runs in Consent Mode: before you agree, its tag does not write cookies or identify you. Smartlook stores its data in the EU, and we have configured it not to capture form input, numbers, email addresses or IP addresses.
5. Marketing cookies
Set only after you agree.
| Name | Set by | Purpose | Expires |
|---|---|---|---|
_fbp |
Meta Pixel (Meta Platforms Ireland Ltd) | Identifies a browser so we can measure whether an advert led to a sign-up | 3 months |
_fbc |
Meta Pixel | Stores the advert click that brought you here | 3 months |
Meta measurement has a second, server-side half: when you consent to marketing, we may also report an event to Meta directly from our servers, including your IP address and browser user agent, and your email or phone number in hashed form. Refusing marketing switches off both halves. This matters, because a browser extension that blocks the pixel would not otherwise stop the server-side report.
6. Where we deliberately do not track
No analytics or marketing tags run inside the club management area or the trainer dashboard, whatever your cookie choice. Those screens display a club's own client records, and we act there as a processor for the club rather than for ourselves. Sending those screens to a third party would mean handing over other people's data on the strength of a staff member's consent, which is not consent they are able to give.
For the same reason, session recording does not run on the booking flow.
7. Changing your mind
Use , linked from the footer of every page. Withdrawing consent takes effect immediately: we tell the relevant service to stop, delete the cookies it set, and reload the page so nothing keeps running from before your decision.
Refusing is as easy as accepting — a single button, on the same screen, with the same weight.
8. Browser controls
You can also block or delete cookies in your browser settings, and most browsers offer a “do not track” signal. Note that blocking strictly necessary cookies will stop you from signing in, and clearing cookies erases your consent choice too, so the banner will appear again on your next visit.
9. Questions
Write to privacy@horsika.com. The wider picture is in our Privacy Policy, and every third party we work with is listed on the sub-processors page.
Questions about this document: privacy@horsika.com. Our other legal documents: Terms of Use, Privacy Policy, Cookie Policy, Data Processing Agreement, Sub-processors, Refunds & Withdrawal, Imprint.