Pre-beta — tell us what breaks.
FLEXMARKSTHESPOT

Privacy Policy

Last updated: October 2026

Flex Marks the Spot ("FMTS", "we") is run by one person. This page says what we collect, why we collect it, who else handles it, and how you can control or delete it.

The short version

  • You do not need an account to browse, filter, build a setup, or share a setup link.
  • We keep basic usage stats with no names, emails, or IP addresses in them. We never sell or share data about individual people.
  • Every kind of email has its own opt-in. Nothing sends without it.
  • We use essential cookies only. No advertising cookies and no tracking pixels.
  • Photos are shrunk in your browser before upload and the hidden location data is dropped. We never store video.
  • You can ask us to delete your account and data, and we do it within 30 days.

Who we are

FMTS is run by one person, the owner. The site is hosted in the United States. Your data is stored in a Supabase (Postgres) database. The site runs on Railway. Sentry watches for site errors, and it is not used to track people. Resend sends our email, from alerts@flexmarksthespot.com.

Using the site without an account

You can browse, filter, build a setup, and share it without signing up. A setup made without an account is tied to your device by an edit cookie, which is how the site knows you are the one who can change it.

A shared setup link is an unguessable web address. Anyone who has the link can view the setup and clone it. Treat the link the way you would treat any private link you send to a friend.

What an account is for

You sign up with an email and a password, or with a magic link. You need an account to:

  • publish a setup to the public Setups directory
  • upload any photo, including a profile photo, setup cover photos, step photos, and Link in Bio images
  • post questions, answers, and reviews
  • upvote, save other people's setups, and follow
  • receive emails such as price alerts

When you sign up, any setup you made on that device can be attached to your new account. We call that claim on signup.

What we hold about your account

  • Your email address.
  • A hashed version of your password. We never see your password and cannot read it back.
  • Your display name or username, and an optional profile photo.
  • Your setups and saved lists.
  • Your My Gym ownership records: what you own, what you paid, and whether you bought it new or used.
  • Your reviews, questions, answers, votes, and follows.
  • Your email preferences.

Emails and consent

Every type of email has its own separate opt-in. Nothing sends without its own opt-in, and a price alert never signs you up for anything else. The types are:

  • price and availability alerts
  • a weekly digest of unanswered questions about equipment you own
  • notifications about products you follow and about questions and answers
  • brand sales and FMTS news, which is marketing and only comes if you opt in

Some of these are planned and not live yet. Each email says which one consent it was sent under and has an unsubscribe link for that type. Alerts require a confirmed email address.

Usage analytics

We record how the site is used. That means pages viewed, filters changed, which product links are clicked, and which results were shown. Events go into an append-only analytics table, keyed by a random session cookie called fmts_sid.

No names, emails, IP addresses, or free text go in. Any payload key that could identify someone is stripped before anything is written. If you are signed in, events may carry a pseudonymous ID that maps to your account in a separate internal table. That mapping is internal only and is never exported.

We do not sell or share analytics data with brands, in any form. Brands cannot buy rankings, badges, or audience lists. Analytics never affect how products rank, and you can read the rules on how we rank.

Shipping estimates and your ZIP code

If you enter a ZIP code to see shipping, we use its first 3 digits to estimate shipping from our own rate tables. We keep only those 3 digits.

  • Without an account, the 3 digits stay in your browser and are forgotten when you close the tab.
  • If you save a ZIP code to your account, we keep only its first 3 digits, until you change it or remove it.
  • Each estimate records the 3-digit area, the store, and the result in our usage stats, without your name, so we can see where shoppers price delivery from.
  • Some brands can quote a live shipping rate for your exact address area. When you ask for one, your full ZIP code, and nothing else, is sent to that brand's store at that moment to get the rate. We do not keep the full ZIP code.

Used equipment search

The used equipment section lets you search by ZIP code and distance. The ZIP code stays on your device: your browser uses it to work out which dealers are near you, and only that list of nearby dealers is sent to our site, as part of the page address. We never receive or store the ZIP itself, with or without an account.

Used listings from dealers are public listings on the dealers' own sites, which we collect automatically and show with a link back to the source. We collect listings, not personal data. A dealer who wants its listings left out can tell us through the contact form and we stop.

Used listings you post

Members can list their own used equipment for sale. A listing is public. It shows the photos, price, condition, and description you enter, your city and state, your username, and a link to your listing on another site such as Facebook Marketplace or Craigslist. For distance search we keep a rough location for the listing, worked out from the city, accurate to about 7 miles. We never show your email address, your ZIP code, or your street address.

Buyers contact you through that other site. We do not pass messages between buyers and sellers, and we store none. You can mark a listing sold or delete it at any time. Deleting your account takes your active listings down. We keep a private record of removed listings for moderation history. If you report a listing, the person you reported is never told who reported them.

Affiliate links

FMTS is funded by affiliate links. If you click a store link and buy, we may earn a commission at no extra cost to you. Store links go through our own /out redirect. It records which page the click came from and which store it went to. It does not record who you are.

As an Amazon Associate, Flex Marks the Spot earns from qualifying purchases.

Commission never affects ranking. People who use the site may not place their own affiliate links anywhere on it.

Cookies

We use essential cookies only:

  • the sign-in session cookie, set by Supabase auth
  • the edit cookie that ties an account-free setup to your device
  • the fmts_sid analytics session cookie
  • short-lived cookies that carry form state, such as a search query or a confirmation notice

We use no advertising cookies and no third-party tracking pixels.

Photos and video

We store photos only. We never store video. Video on the site is a link to YouTube, Instagram, or TikTok, embedded from that platform. When you play one, that platform's own terms and privacy policy apply.

Your browser resizes and compresses each photo before it uploads, to about 1600 pixels on the long edge. Then our server re-encodes it before storing it, which removes all hidden photo metadata, such as GPS location, even if the browser step was skipped. We do not store the original file. Every photo upload requires an account.

The owner reviews uploaded photos before they appear publicly. Until a photo is approved, only you can see it. There are caps on how many photos you can add, for example a few per step and up to 3 cover photos per setup.

Moderation and your posts

The owner reviews posts from accounts under 7 days old before they appear. Established accounts post instantly. Questions and answers have a report button. To report anything else, use the contact form. We keep a copy of removed content and moderation notes as needed for moderation and legal records. The Terms of Use cover what you can post.

Who else handles your data

  • Supabase stores our database and handles sign-in.
  • Railway runs the site.
  • Sentry receives error reports, not tracking data.
  • Resend delivers our email.
  • Stores you click through to, and the video platforms above, have their own privacy policies.

Your choices and deleting your data

You can unsubscribe from each type of email with the link in any email of that type, or by asking us through the contact form. You can delete your own setups, reviews, and photos. Shared setup links stop working when you delete the setup.

To delete your whole account and its data, use the contact form or email flexmarksthespot12@gmail.com from the email address on the account. We delete within 30 days. We keep only what we must, such as anonymized analytics, moderation logs about removed content, and legal records. You can ask for a copy of your data the same way.

Age

You must be 18 or over, or 13 or over with a parent's permission. We do not knowingly collect data from children under 13. If we learn that we have, we delete it.

Changes to this policy

If we change this policy in a way that matters, we put a notice on the site. If your account is affected, or you opted into FMTS news, we also email you. The date at the top shows when it last changed.

Contact

Use the contact form or email flexmarksthespot12@gmail.com.

Mailing address: Flex Marks the Spot, PO Box 72, Windsor, CO 80550

More about who runs the site is on the about page. The rules for using the site are in the Terms of Use.