Privacy Policy

Your name

It is how you appear to your coach, your team and on a public profile if you have one.

Your email address

It identifies your account at sign-in and is how we reach you about it.

A hash of your password

So we can check a sign-in without ever storing the password itself.

Whatever you choose to put in a profile

Coach profiles, gym listings, bios, specialties, prices and links are optional, and public exactly as far as you set them.

Training data you enter

Sets, loads, RPE, check-ins and attempts. Training is never shown on a public page: you see it, and so does a coach you are working with.

A competition record you link to your account

Which public competition record is yours, so your own pages can show your results. The link is private account data — the record’s public page says nothing about it — and you can drop it at any time.

Media you upload

Video and images for review, profiles and gym listings. They are stored on our own disk and served through short-lived signed links.

A testimonial you give a coach

Your account name, a rating, your words and any lift videos you attach, with the moment you consented. It is public on that coach’s profile until you remove it, which deletes the videos with it.

A gym listing and the account that edits it

A gym we have verified is sent a code, and that code sets up one Attempt account for the listing. We store a hash of the code, the note saying who it went to, the listing it made, and the account that opens it — never the code itself.

A meet you list

Everything you type into the listing — the meet, the venue and its address, your schedule, your registration link, the flyer you upload — plus the account that posted it and the contact email you put on it. All of it is public on the listing, because that is what a listing is for. You can edit or withdraw it at any time, and withdrawing takes it off every public surface.

A region preference, if you set one

The front page asks where you lift so it can show gyms and coaches near you. It is a cookie, and only if you answer.

Product events, in our own database

Rows such as "signed up", "logged a set", "published a profile", written to a table we own. They tell us which parts of Attempt are used and which are broken.

A daily count of page addresses

One row per page address per day with a number on it — no cookie, no IP address, no account, nothing that could be traced back to a visit or a person.

Ordinary server logs

Request paths, timestamps and errors, kept so the service can be run and debugged.

That is the whole list. Attempt does not ask for your address, your phone number, your date of birth, your payment details or a government ID, and it does not read your contacts, your location in the background, or anything on your device.

• ·We do not sell your data, and we do not share it with data brokers.
• ·There are no advertising pixels, no trackers and no ad network, and nothing here is sold or shared for advertising. Product events are rows in our own database and go nowhere else. The one thing that leaves is a count of page views, measured by Vercel Analytics: it sets no cookies and follows you to no other site, it records the page, the referrer, the country and the kind of device, and it identifies a return visit by a hash of the request that is thrown away within a day. It never sees your name, your email or anything you lifted.
• ·There is no email marketing and no mailing list. The only messages Attempt sends are the two account emails described in section 3; everything else is a row you read inside the product. If you turn it on, a weekly summary of your own account’s activity, off by default, with an unsubscribe link in every one.
• ·If a coach adds you to their roster by email, one invitation email with their message and a link to accept; nothing more unless they invite you again.
• ·There are no embedded third-party widgets loaded without you: no chat, no social embeds, no external video player, no hosted font served at page load. A gym listing’s map is the one embed on Attempt, and it stays unloaded until you press Show map.
• ·We do not build a profile of you for anyone else, and we do not do automated decision-making about you.

Other people on Attempt see what you have chosen to publish: a coach profile, a gym listing, a meet entry. Competition results are public records of a sporting event and are public here as they are everywhere. Training is different: it is never shown on a public page, and the only other people who see it are the coaches you are working with.

Two third parties process data on our behalf. The first is Stripe, our payment processor, and only for coaches who start a paid plan. Payment happens on Stripe's own hosted checkout page, so your card number, expiry and security code go to Stripe and never touch Attempt's servers, logs or database. Stripe receives your email address, your name and the plan you chose; we receive back and store only identifiers and status: a Stripe customer id, a subscription id, which plan it is, whether it is active, when it renews and whether it is set to cancel. Stripe is an independent controller of the payment data it holds and processes it under its own privacy policy. Stripe also runs the optional ID check you can use to claim a competition record: the document and the selfie are taken on Stripe's own page and stay with Stripe, and all Attempt keeps is the session reference and whether the name on the document matched the name on the record — never the document, the image, the name or the date of birth. Nobody else processes your training, your videos or your messages.

The second is Resend, our email provider. Attempt sends exactly two emails, both of them asked for by something you just did: a password reset link, when you ask for one on the forgot-password page, and a six-digit verification code, when you create an account with an email and password. There is a third only if you ask for it: the weekly summary of your own account's activity, off by default, which carries a one-click unsubscribe link in every message. And if a coach adds you to their roster by email, one invitation email carrying their message and a link to accept — one message, not a list, and nothing more unless that coach invites you again. To deliver them we pass your email address, the subject and the message to Resend, who transmits it and processes it under their own privacy policy. There is no marketing, no newsletter, no mailing list and no tracking: the messages carry no images, no beacon and no click-tracked links, so opening one tells us nothing. We cannot tell whether you read it.

A gym listing can show a map, and that map comes from OpenStreetMap. It loads only when you press “Show map”, and from that moment OpenStreetMap receives your IP address the way any embedded map would; press nothing and they never hear from you at all.

Beyond that, data leaves Attempt only where the law requires it, or to protect someone from immediate harm. No third-party processor reads your training content: it lives in our own database and on our own disk.

Attempt sets a small number of first-party cookies and stores a little on your device, all of it either strictly necessary or something you asked for. No cookie is used for advertising or for tracking you across sites, which is why there is no consent banner. The full inventory, with names and lifetimes, is on the cookie page.

• ·Account data is kept until you delete your account. Ask at support@attemptpl.com and we will delete it; self-serve deletion tooling is coming during the beta.
• ·Sessions expire 30 days after sign-in, and signing out deletes the session record immediately.
• ·Uploaded media is deleted with the content it belongs to.
• ·Files you send with a claim review are seen only by the person reviewing it, and are deleted when the claim is decided.
• ·Product events and server logs are kept while Attempt needs them to run and improve the service, and are not used to identify you to anyone outside it.
• ·Public competition results are not yours to delete: they come from the competition record, not from Attempt. See the note below.

You must be 18 or older to hold an account. Attempt is not directed at children and does not knowingly collect data from them. If you believe a child has an account, write to team@attemptpl.com and we will remove it.

You can see almost everything Attempt holds about you by signing in and looking. Beyond that, you can ask us to correct it, to give you a copy of it, or to delete it. Write to support@attemptpl.com and a person will handle it.

Competition results published by federations and mirrored from OpenPowerlifting are public records of a sporting event, not data Attempt collected from you. We can remove a profile page; correcting a result means correcting it at the source. Write to meets@attemptpl.com and we will help you work out which is which.

Passwords are hashed, never stored. Session cookies are HTTP-only, and secure in production. Uploads are served through short-lived signed links rather than public paths. Attempt is a beta product run by a small team, so treat that as honest effort rather than a certification.

Privacy questions and requests: support@attemptpl.com. Legal notices: team@attemptpl.com.