Skip to content

Privacy Policy

Last updated: April 7, 2026

OTFInsider (“we,” “us,” or “our”) respects your privacy. This policy explains what data we collect, how we use it, who we share it with, and your rights under GDPR, CCPA, COPPA, and other privacy laws.

OTFInsider is an unofficial fan site for Orangetheory Fitness members, operated independently and not affiliated with Orangetheory Fitness or Ultimate Fitness Group LLC.

1. Information We Collect

Information you provide

  • Email address — when you subscribe to our newsletter or submit feedback.
  • Workout ratings and splat points — when you rate a daily workout. This is submitted anonymously.
  • Feedback messages — when you contact us through the feedback form.

Information collected automatically

  • Usage data via Google Analytics 4 — pages visited, time on page, device type, general location (country, region). Only collected after you consent.
  • Advertising data via Google AdSense — used to serve relevant ads. Only collected after you consent.
  • Performance data via Vercel Analytics — cookieless page load metrics.
  • IP address — used temporarily for rate limiting on ratings and feedback submissions. Not stored long-term.

Performance Tracker (optional feature)

If you use our Performance Tracker, you may provide:

  • Apple Health export data — processed entirely in your browser. Never sent to our servers.
  • Workout screenshots — sent to Anthropic's Claude API for parsing, not stored on our servers.
  • Orangetheory login credentials — proxied to Orangetheory's servers, never stored by us.

2. How We Use Your Information

  • Deliver daily workout intel and monthly calendars via email
  • Respond to feedback and support requests
  • Display community ratings and averages on workout pages
  • Measure site performance and improve the user experience
  • Serve relevant advertising (with your consent)
  • Comply with legal obligations

3. Legal Basis (GDPR)

If you are in the European Economic Area, United Kingdom, or Switzerland, we process your data under the following bases:

  • Consent — for email subscriptions, analytics, and advertising cookies
  • Legitimate interest — for site security, abuse prevention, and rate limiting
  • Contract performance — to deliver services you request (like the daily email)

4. Third-Party Service Providers

We share data only with these service providers, each bound by their own privacy policies:

We do not sell your personal information to third parties.

5. Cookies and Tracking

We use the following categories of cookies and similar technologies:

  • Strictly necessary — required for the site to function (e.g., consent preferences, theme toggle). Always active.
  • Analytics — Google Analytics 4 to measure usage. Only active with your consent.
  • Advertising — Google AdSense to serve relevant ads. Only active with your consent.

You can manage your preferences any time via the “Cookie Settings” link in the footer. We also respect the Do Not Track browser setting.

6. Data Retention

  • Email subscribers — until you unsubscribe
  • Workout ratings — indefinitely (anonymized)
  • Feedback messages — 2 years in Slack, then deleted
  • Analytics data — up to 14 months in Google Analytics, then deleted
  • IP rate-limit cache — 10 minutes in memory

7. Your Rights

GDPR Rights (EU/UK/EEA)

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data (right to erasure)
  • Restrict or object to processing
  • Data portability (receive your data in a portable format)
  • Withdraw consent at any time (for processing based on consent)
  • Lodge a complaint with a supervisory authority in your country

CCPA Rights (California)

California residents have the right to:

  • Know what personal information we collect and how we use it
  • Request deletion of your personal information
  • Opt out of the sale or sharing of personal information (we do not sell personal information)
  • Non-discrimination for exercising your rights

How to exercise your rights

Email us at privacy@otfinsider.com with your request. We'll respond within 30 days. Include enough information for us to identify your data (e.g., the email address you subscribed with).

8. Children's Privacy (COPPA)

OTFInsider is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. Where required by GDPR, we rely on Standard Contractual Clauses or adequacy decisions for cross-border transfers.

10. Security

We use reasonable technical and organizational measures to protect your data, including HTTPS encryption, access controls, and rate-limiting. No system is 100% secure, so we cannot guarantee absolute security.

11. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent changes. Material changes will be announced via the site banner or email.

12. Contact Us

For privacy questions or to exercise your rights, contact us at:

Email: privacy@otfinsider.com