Privacy Policy
Last updated: 4 August 2026
This policy explains, in plain language, what information Yoga.com collects, why we collect it, and the choices you have. We wrote it to be read, not to be survived. If anything here is unclear, ask us at info@yoga.com.
In this policy, "we" and "us" mean Inter Media Digital Marketing LLC, the company that operates Yoga.com, and "you" means anyone who visits or uses the site. If you are in the EU, the UK, or Switzerland, we are the "controller" of the personal data described here, and the contact details at the end of this page are how you reach us.
The short version
We collect only what we need to run the site and the Yoga Club, understand what is useful to readers, and keep things working and secure. We do not sell your personal information for money. Analytics and session replay run only under the consent rules below, which differ by region, and we describe them honestly, including the part that works on an opt-out basis in the US. No ads are served on the site today; if that changes, this policy explains what would happen and the controls you will have. You can ask to see, correct, or delete what we hold about you, and you can change your cookie choices at any time through the "Cookie settings" link in the footer.
What we collect
Things you give us directly. If you subscribe to the newsletter, we receive your email address. If you create a Yoga Club account, we receive your email address, an optional name, and a password, which we store only in hashed form. If you use the practice log or talk with Maya, we receive what you choose to record or say. If you write to us, we receive your message and your email address.
Things we collect automatically. Like most websites, when you visit we receive some technical information your browser sends: your approximate region, device and browser type, the pages you view, and how you arrived. Whether our analytics tools may collect this is governed by the consent rules below, and our Cookie Policy lists every cookie involved.
What we infer. Very little. We infer your approximate region once, from a best-effort geolocation signal with a timezone fallback, purely to decide which consent rules apply to your visit. If we cannot tell where you are, we treat you as if you were in the EU and apply the strictest rules. Beyond aggregate analytics, we draw no inferences and build no profiles about you.
Member accounts, the practice log, and Maya
If you join the Yoga Club, we store your email address, an optional name, and a hashed password. A small session cookie called vauth_hint keeps you signed in; it is strictly necessary and is not used for tracking.
The practice log stores what you enter: the date, duration, and style of a practice session, plus any notes you choose to add. Maya, our AI companion, keeps your conversation history so it can be useful to you, and those chats may include wellness-related things you decide to share.
We use practice-log entries and Maya conversations only to provide those features to you. We do not use them for advertising, we do not sell them, and we do not share them. Because this information can touch on your wellbeing, we treat it with extra care and describe it in more detail in our Consumer Health Data Privacy Policy.
The newsletter
You can subscribe through the box in the footer or through a popup. The popup does not appear until you have answered or closed the consent banner, so it never jumps ahead of your cookie choice. We send roughly one email a week.
We use SendGrid to deliver the emails. Every email includes an unsubscribe link; one click and we stop. Your address stays on the list only until you unsubscribe.
Analytics and session replay
We use two tools to understand what readers find useful and where the site confuses people:
- Google Analytics 4. Standard, aggregate web analytics (we run two GA4 properties). When it runs with your permission it sets the _ga and _ga_* cookies. When consent is denied, Google may still receive cookieless, aggregated pings under Google's "consent mode"; these set no cookies and are not used to identify you.
- Microsoft Clarity. Session analytics and replay, meaning a recording of how pages are used (clicks, scrolls, taps) that helps us find broken layouts and confusing flows. As of the date of this policy, Clarity loads only under an accepted consent state. In the EU, UK, and Switzerland that means it does not load until you choose Accept; under the US opt-out model described below, that accepted state applies by default until you opt out. If you reject, opt out, or send a Global Privacy Control signal, it does not load, and if it was already running it stops. When it runs with your permission it sets the _clck, _clsk, CLID, and MUID cookies.
We have also implemented Google Consent Mode v2. On every page, before any Google tag runs, all four Google consent signals (ad_storage, ad_user_data, ad_personalization, analytics_storage) default to "denied". Accepting grants analytics_storage only; the three advertising signals stay denied, because we serve no ads. Google explains its side at How Google uses information from sites or apps that use its services.
Cookies and your consent choices
Our Cookie Policy lists every cookie. Here is how the choice itself works.
If you are in the EU, UK, or Switzerland (or we cannot tell where you are)
You are on an opt-in model. A consent bar appears on your first visit with two buttons: "Accept" and "Reject non-essential". No analytics or session-replay cookies are set until you choose Accept.
If you are in the United States or elsewhere
You are on an opt-out model, and we want to say that plainly: analytics runs by default, and the banner offers a "Do Not Sell or Share" choice that switches analytics and session replay off. This is not an opt-in model. If you prefer nothing to run, use that choice or a Global Privacy Control signal, described below.
How your choice is stored
Your choice is saved for about six months (182 days) in a first-party cookie called gdpr_consent, which records whether consent was given, the detected region, a timestamp, and the banner version, with a backup copy of the same name in your browser's localStorage. When it expires, we ask again.
Changing your mind is as easy as making the choice: the "Cookie settings" link in the footer reopens the preferences banner at any time. For US visitors, that same link serves as our "Your Privacy Choices" link.
Global Privacy Control
If your browser sends a Global Privacy Control (GPC) signal and you are on the US opt-out model, we honor it automatically as a valid opt-out of sale and sharing; no banner interaction is needed. If you accepted cookies before turning GPC on, use the "Cookie settings" link to update your saved choice; we are also rolling out an update so that a GPC signal overrides a previously saved acceptance automatically.
Advertising
There is no advertising on Yoga.com today. No ad cookies are set, and the advertising consent signals described above are denied for every visitor.
We plan to introduce Google AdSense, because advertising is how we would keep the site free to read. If and when that happens, Google and its partners would use advertising cookies, including the DoubleClick cookie, to serve ads based on your prior visits to this site and to other websites. In plain terms: the ads you would see here may reflect where you have been on the web, not anything you have told us.
Under California law and similar state laws, those advertising cookies may count as "sharing" personal information or "targeted advertising". If ads launch, the opt-outs in this policy will apply: the banner's "Do Not Sell or Share" choice, the "Cookie settings" link in the footer, and the GPC signal. You could also opt out of personalized ads at Google Ads Settings and of many other third-party advertising cookies at aboutads.info. Launching ads would be a meaningful change, so we would update this policy and the date above when it happens.
Why we use your information, and our legal bases
Where laws like the GDPR apply, every purpose needs a legal basis. Here are ours, purpose by purpose:
- Running your Yoga Club account, the practice log, and Maya: performance of our contract with you. We cannot provide these features without the data they run on.
- Sending the newsletter: your consent, which you can withdraw at any time with the unsubscribe link.
- Analytics and session replay: your consent, given or refused through the consent banner.
- Keeping the site secure and preventing abuse: our legitimate interest in protecting the site, our readers, and our team, for example when we review logs or block abusive traffic.
- Answering your messages: our legitimate interest in responding to people who write to us.
- Meeting legal obligations: compliance with the laws that apply to us, such as tax and accounting rules.
You are never required by statute to give us personal data. Some of it is needed in a practical, contractual sense: we cannot create an account without an email address, or send a newsletter without one. If you choose not to provide something, the only consequence is that we cannot offer you that particular feature.
We do not use automated decision-making that produces legal or similarly significant effects about you. No profiling, no scoring, no algorithmic gatekeeping.
Who we share it with
We share personal information only with service providers who process it on our behalf, and only so they can do that work for us:
- Google: Google Analytics (analytics) and Google Cloud Platform (hosting and processing infrastructure).
- Microsoft: Clarity session analytics and replay, only under an accepted consent state (after you choose Accept on the opt-in model; by default until you opt out on the US opt-out model).
- SendGrid: newsletter delivery.
- Google advertising partners: prospectively, only if and when ads launch as described above.
We may also share information if the law requires it, or to protect the safety and rights of our readers and our team. We do not sell your personal information for money, and we do not trade it.
International transfers
The site is hosted and processed on Google Cloud Platform in the United States. If you visit from the EU, UK, or Switzerland, this means your data is transferred to the US. Our processors are certified under the EU-US Data Privacy Framework (Google LLC is DPF-certified) and/or rely on Standard Contractual Clauses approved by the European Commission. If you want to know which safeguard covers a specific transfer, ask us at info@yoga.com.
How long we keep it
We keep personal information only as long as we genuinely need it, and the "how long" depends on what it is:
- Your consent record: about six months (182 days), the lifetime of the gdpr_consent cookie; then the banner asks again.
- Account data, the practice log, and Maya conversations: for as long as your account is active, plus a short wind-down period after you close it while deletion completes across our systems.
- Newsletter details: until you unsubscribe.
- Analytics data: for the retention period configured in our Google Analytics settings, after which Google deletes or aggregates it.
- Messages you send us: for as long as we need them to answer you and handle any follow-up.
Your rights in the EU, UK, and Switzerland
If you are in the European Economic Area, the UK, or Switzerland, you have the right to:
- Access: ask for a copy of the personal data we hold about you;
- Rectification: have inaccurate data corrected;
- Erasure: have your data deleted;
- Restriction: limit how we use your data while a question about it is resolved;
- Portability: receive the data you gave us in a structured, commonly used, machine-readable format;
- Objection: object to processing we base on legitimate interests;
- Withdraw consent at any time: for anything based on consent (analytics, session replay, the newsletter), without affecting what was lawfully done before. The footer's "Cookie settings" link and the unsubscribe link in every email exist for exactly this.
To exercise any of these, write to info@yoga.com. You also have the right to lodge a complaint with the data protection supervisory authority in your country; in the UK, that is the Information Commissioner's Office (ICO). We hope you will come to us first, and we will do our best to put things right.
Your privacy rights in California
This section is for California residents and uses the categories of the California Consumer Privacy Act (Cal. Civ. Code § 1798.140).
Categories of personal information we collect:
- Identifiers: email address, optional name, and IP address.
- Internet or other electronic network activity information: pages viewed, device and browser type, and how you interact with the site, collected through cookies only as your consent choices allow.
- Approximate geolocation: only an inferred region (for example, "EU" or "US"), used to decide which consent rules apply to your visit.
- Inferences: none beyond the aggregate analytics described above. We build no individual profiles.
- Sensitive personal information: your account login credentials, and any wellness-related content you choose to put in the practice log or share with Maya. We use sensitive personal information only to provide the services you ask for, never for advertising, and we do not sell or share it. Because of that limited use, we do not use or disclose it for purposes that would require a right to limit under the CCPA, but you can always ask us about it.
Sale and sharing. We do not sell personal information for money. We do not currently share personal information for cross-context behavioral advertising, because no ads are served on the site today. If Google ads launch, advertising cookies may constitute "sharing" under California law, and the opt-outs will apply: the banner's "Do Not Sell or Share" choice, the "Cookie settings" link in the footer (which serves as our "Your Privacy Choices" link), and the Global Privacy Control signal.
We honor Global Privacy Control. We treat a GPC signal from your browser as a valid opt-out preference signal and apply it automatically as an opt-out of sale and sharing, with no banner interaction needed.
Your rights: to know what personal information we collect, use, and disclose; to delete it; to correct it; to opt out of sale or sharing; to limit the use of sensitive personal information; and not to be discriminated against for exercising any of these rights. Same site, same service, whichever choices you make.
How to make a request. Email info@yoga.com. We verify requests by confirming you control the email address on the account or subscription concerned. Authorized agents may submit requests on your behalf with your written permission. We respond within 45 days; where reasonably necessary we may take one additional 45-day extension, and we will tell you if we do. Requests to know cover the 12 months before your request.
Your privacy rights in Colorado, Connecticut, Virginia, Texas, Oregon, Montana, and other states
If you live in Colorado, Connecticut, Virginia, Texas, Oregon, Montana, or another state with a comprehensive privacy law, you have the right to:
- access the personal data we hold about you and confirm whether we are processing it;
- correct inaccuracies;
- delete your personal data;
- receive a portable copy of the data you provided;
- opt out of targeted advertising, the sale of personal data, and profiling that produces legal or similarly significant effects. We do no such profiling and we serve no targeted advertising today; if ads launch, the opt-out controls described above will apply.
We honor universal opt-out preference signals, including Global Privacy Control, as an opt-out of targeted advertising and sale where your state's law provides for them.
Appeals. If we decline your request, you can appeal by replying to our response email and telling us you wish to appeal. We will re-review the request and answer within the window your state's law sets, and if we still decline, we will tell you how to raise it with your state attorney general.
Children
Yoga.com is meant for adults. Our services are not directed to children, and we do not knowingly collect information from anyone under 16. Creating an account or subscribing to the newsletter requires you to be at least 16. If you believe a child has sent us personal information, tell us at info@yoga.com and we will delete it.
Security
We use reasonable technical and organizational measures to protect your information. Passwords are stored hashed, never in plain text, and access to personal data is limited to what running the site requires. No website can promise perfect security, but we take this seriously and act quickly if something goes wrong.
Changes to this policy
As the site grows, we may update this policy. When we make a meaningful change, and launching advertising would be one, we will update the date above and, where appropriate, let you know more prominently.
Contact
Inter Media Digital Marketing LLC, The Exchange Tower, Office 2501-29, Business Bay, Dubai, United Arab Emirates.
