Privacy policy

Last updated: 24 October 2026

This policy covers the website fitwithrose60.com. We set no cookies, show no advertising and never sell your data.

Who is responsible

Badr Zinoun, an individual based in Morocco, publishes Fit with Rose and is responsible for the data described here. Contact: contact@fitwithrose60.com.

When you ask for the free guide

The form keeps:

• your email address (required);
• your first name, if you give it;
• whether you ticked the box “Yes, email me now and then about new Fit with Rose workouts. I can unsubscribe at any time.”, and if you did, the version of that wording;
• the page where you filled in the form, and the campaign tags in the address of that page, if there were any (UTM parameters: source, medium, campaign, content, term);
• the date and time;
• the random identifier our measurement tool gave your visit, if it was running (see below), so we can count how many visits lead to a download;
• each time your download link is used: the date and time.

Why: to give you the guide, to count requests and downloads, and, only if you ticked the box, to email you about new workouts later. We do not send any emails for now. The legal basis is your request for the guide and, for the emails, your consent, which you can withdraw at any time.

The download link is signed and works for 7 days. The guide is stored in a private space and is only sent through that link.

Protection against abuse

To limit requests from the same connection to 10 a day, we keep, for each day, a code computed from your IP address with a secret key and the date, with a counter. The code cannot be turned back into your IP address and changes every day. These counters are deleted after two to three days. We never store your IP address or the description of your browser (user agent).

Measuring how the site is used (PostHog)

We use PostHog (PostHog Cloud EU, servers in Frankfurt, Germany). When a page loads, your browser loads PostHog's script from its EU servers. It is set up without cookies and without storing anything on your device: the random identifier it creates is kept in memory for the page you are on and forgotten when you leave it. It does not record your screen, does not collect your clicks in general and never reads what you type.

It sends PostHog:

• each page view and page leave: the page address (with its campaign tags), the site you came from, your browser, system, device type, screen size, language and time zone, how long you stayed and how far you scrolled;
• when you press the Print button or play a video: that action, the page and the video's identifier.

Our server also sends PostHog two events: when you ask for the guide and when you download it, with the page, the campaign tags, whether you ticked the email box, whether you gave a first name, and the random identifier of your visit. Never your email address or your name.

PostHog receives your IP address with the events sent by your browser. It uses it to estimate your approximate location (country, region, city), and does not store it: our PostHog project is set to discard IP addresses. PostHog keeps the events for the retention period of our plan: one year on the free plan, seven years on paid plans.

Videos

Video pictures (thumbnails) are served by this site. The YouTube player, from the youtube-nocookie.com address, loads only when you press play. From then on, YouTube (Google) receives information about you under its own privacy policy and may store information on your device.

Links to other sites

Links to YouTube, Instagram and official health websites (NHS, CDC) take you to sites with their own privacy policies.

Cookies

This site sets no cookies. The YouTube player may set its own once you press play.

Who processes the data, and where

• Cloudflare, Inc. (United States) hosts the site, the database (Western Europe region) and the guide file. Cloudflare keeps technical logs of requests for a limited time to run and secure the service; they may include your IP address.
• PostHog Inc. measures the use of the site on its EU servers (Frankfurt, Germany), as described above.

Your data is therefore processed outside Morocco.

How long we keep data

• Guide requests and download records: until you ask us to delete them, and three years at most.
• Abuse counters: two to three days.
• PostHog events: see above.

Your rights

Under Moroccan law 09-08 and, if you are in the European Union, the GDPR, you can access, correct or delete your data, object to its use and withdraw your consent. Write to contact@fitwithrose60.com. Deleting your details also turns off your download link.

You can also complain to the CNDP, the Moroccan data protection authority, or to the data protection authority of your country.

Children

This site is meant for adults.

Changes

We publish every change on this page, with its date.