Last updated: November 8, 2026
Cookie Policy
NextGenTM, Inc., a Delaware corporation, which operates Super Athlete at superathlete.ai, doing business as Super Athlete and LootMogul, uses cookies, local storage, session storage and site caches as described below. Mailing address: 831 N Tatnall Street, Suite M #275, Wilmington, DE 19801, United States. Cookie questions and privacy requests: privacy@nextgentm.com.
Choices and Global Privacy Control
Necessary is always on. Functional, Analytics and Marketing are opt-in categories: nothing optional runs, loads or writes before opt-in. Decline turns all optional categories off; Save choices applies your selected categories; Accept all enables them unless Global Privacy Control is on. Global Privacy Control overrides previous choices and switches every optional category off. Do Not Track also blocks browser analytics. Choices last 12 months; older unversioned choices require a fresh selection. A setting you deliberately choose, including language, consent and local progress, is Necessary rather than an optional tracking cookie.
Local storage has no browser expiry unless the feature implements one; session storage normally lasts for the tab session. The limits below distinguish validity/freshness from physical deletion. Dynamic keys use the account, club, episode or other reference shown in angle brackets. Authentication libraries can also use short-lived verification/support keys associated with the sign-in session; their exact suffixes depend on the sign-in method. No sign-in credential values are listed here.
Necessary
sa_cookie_consent
Provider: Super Athlete (first party)
Family consent choices and expiry
Duration: 12 months
sb-<account>-auth-token; associated -code-verifier and -user keys; sb-old-auth (legacy client)
Provider: Authentication service / first party
Sign-in session, refresh and OAuth verification
Duration: Session lifecycle; refreshed while signed in, removed on sign-out; no fixed browser-storage TTL
sidebar:state (cookie)
Provider: Super Athlete (first party)
Chosen sidebar state
Duration: 7 days
sa-theme; sa_lang; sa_news_lang; ej-motion; coach.videoCall.language
Provider: Super Athlete (first party)
Chosen theme, languages and motion setting
Duration: Until changed or cleared
sa_active_instance; sa_instance_changed_at
Provider: Super Athlete (first party)
Account service selection and change timestamp
Duration: Until changed or cleared
loginReturnTo; sa_post_auth_hash; sa_pending_join_v1; sujith-pending-question; sa_intelligence_pending
Provider: Super Athlete (first party)
Resume a requested sign-in, join or question
Duration: Tab session or consumed; pending join validated for 30 minutes
pending_spend_context_v1; pending_spend_retry_v1; last_spend_receipt_v1
Provider: Super Athlete (first party)
Requested purchase/AI Token retry and receipt
Duration: Tab session; context/retry valid for 30 minutes
sa_impersonate_uid; sa_impersonate_name; mba_portal_token; mba_portal_exp; mba_portal_notes
Provider: Super Athlete (first party)
Authorized administrator/session workflows and chosen notes
Duration: Tab session; portal authorization expires after 8 hours or sign-out
sa_athlete_directory_pass; sa_private_tour_failures; mba_commissioner_passcode
Provider: Super Athlete (first party)
Restricted directory/admin access and failure protection
Duration: Directory pass: tab; failures: 5-minute lockout; persisted admin setting until cleared
sa_admin_clubs_visible_cols; supergenius:active_club_id
Provider: Super Athlete (first party)
Chosen management display and club context
Duration: Until changed or cleared
sa-pwa-dismissed; sg_welcome_dismissed; sg_social_nudge_dismissed; test_badge_dismissed; sa-stale-chunk-reload
Provider: Super Athlete (first party)
Remember dismissed notices and prevent reload loops
Duration: PWA suppressed for 7 days (timestamp persists); sg settings until cleared; test/reload guards: tab
club_draft:<user>; sa_brand_inquiries; consciousnessWaitlist
Provider: Super Athlete (first party)
Requested local drafts and submitted inquiry/waitlist details
Duration: Until cleared
insider_sub:<source>; insider_sub:any; nl_sub:<club>:<email>; club_join_email_sent:<slug>:<reference>
Provider: Super Athlete (first party)
Remember requested subscriptions and prevent repeat membership emails
Duration: Until cleared
sa_rewards_prefs_v1; sa_rewards_rank_v1:<region>:<membership>
Provider: Super Athlete (first party)
Chosen reward filters/region and cached offer order
Duration: Preferences until cleared; ranking: tab, refreshed after 10 minutes
superathlete.academy.transcript.<slug>; superathlete.coachReggie.transcript.v1
Provider: Super Athlete (first party)
Continue requested conversations locally
Duration: Last 50 turns, until reset/cleared; no time expiry
superathlete.coachFreeTrialUsed.<coach>.<user>; nnl_guest_used_<athlete>; sa_intelligence_free_used
Provider: Super Athlete (first party)
Enforce free-use limits for requested interactions
Duration: Coach/guest flags until cleared; intelligence flag: tab
superathlete.heygen.tp.v2.<coach>.<photo>; superathlete.heygen.reply.v3.<coach>.<photo>.<text>
Provider: Super Athlete (first party)
Cache requested talking-portrait identifier and generated reply URL (key contains reply text)
Duration: Photo ID until cleared; reply URL expiry or 6-day fallback, removed on stale lookup
sujith-7day-v1; sujith-journey-<index>; sujith-analytics-consent
Provider: Super Athlete (first party)
Chosen local reflections/progress and separate usage-consent setting
Duration: Until reset or cleared; consent setting does not enable analytics without family Analytics consent
Cache Storage: sa-pages; sa-assets; sa-images; sa-rewards-data; generated Workbox precache
Provider: Super Athlete (first party)
Site/media performance and offline caches (not advertising identifiers)
Duration: Pages/precache until replaced/cleared; assets 30 days/300 entries; images 14 days/200; rewards 1 day/40; browser may evict earlier
Functional
nil_exit_intent_shown
Provider: Super Athlete (first party)
Show the optional first-party NIL suggestion once per tab, only after Functional opt-in
Duration: Tab session; removed when Functional consent is withdrawn
Analytics
sa_funnel_session; sa_return_logged
Provider: Super Athlete (first party)
Visit/funnel identity and returning-visit deduplication
Duration: Tab session
sa_visitor_id; sa_first_touch; sa_last_touch; sa_visit_days
Provider: Super Athlete (first party)
Pseudonymous identity, campaign/referrer and returning visits
Duration: Until consent withdrawal or cleared; at most 60 distinct visit days (not 60-day expiry)
sa_visitor_id_v1; sa_club_attr_v1:<club>; sa_clubview_v1:<club>
Provider: Super Athlete (first party)
Club visit identity, campaign attribution and deduplication
Duration: ID/attribution until withdrawal/cleared; views: tab
sa_join_funnel_events_v1; sa_referrer_id
Provider: Super Athlete (first party)
Join measurement and referral attribution
Duration: Up to 500 events until withdrawal/cleared; referral consumed on use
sa_visitor_geo_v2
Provider: Super Athlete (first party)
IP-based approximate location for optional coaching activity logs
Duration: 24-hour freshness in local/tab storage, cleared on withdrawal
ej_vid; sujith-sid
Provider: Super Athlete (first party)
Eddie journey and Sujith anonymous-count IDs
Duration: Eddie until withdrawal/cleared; Sujith: tab; feature-specific permissions also apply
_ga; _ga_<measurement-id> (cookies)
Provider: Google Analytics 4
Google Analytics 4 visitor/session measurement; advertising signals disabled
Duration: Configured cookie expiry: 12 months; GA may refresh cookie lifetime; deleted on withdrawal
Marketing
No marketing pixel or cross-context advertising cookie currently runs on this site. Marketing choice alone does not subscribe you to emails. Requested reward/merchant links can include a click reference for transaction/reward verification; external sites can set their own cookies under their policies.
Changing choices, deletion and changes
Reopen Cookie settings from any family footer on this site. Withdrawing Analytics stops future measurement and removes our analytics identifiers and accessible first-party GA cookies; it does not retroactively delete database records or third-party copies. Browser settings can clear cookies, local storage and caches separately, which can sign you out or remove local reflections and transcripts. We update this page when practices change. Legal notices: legal@nextgentm.com; customer support: support@nextgentm.com.