Unless otherwise expressly stated, terms in this Cookie Policy have the same meaning as defined in the Privacy Policy.
This Cookie Policy supplements the information contained in the Privacy Policy and describes how InnoSoft Canada Inc. use cookies and related technologies while providing the Services. This Cookie Policy explains what cookies and related technologies are, why we use them, and how you can manage your preferences when you visit our Sites.
What are cookies and related technologies?
Cookies are small text files that are placed on your device by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
We may use related technologies such as web beacons, pixels, embedded scripts, or other logging technologies.
How do we use cookies and related technologies?
We use cookies and related technologies for the following purposes:
- Storing your preferences and settings;
- Permitting you to sign-in and authenticate you so you can access our Sites;
- Permitting us to deliver more relevant advertising content;
- Securing our Sites, including for fraud detection and other security and network management;
- Monitoring visitors to our Sites and collecting statistics regarding Site usage to inform how we can improve our Sites; and
- Providing us with business and marketing information.
- Processing payments securely through our payment providers.
Some of the cookies below are only used when the organization that provides your account (for example, your recreation department or university) has turned on the related feature.
We also use similar browser storage (local storage and session storage) for the same purposes; these are listed in the tables below alongside cookies.
Essential Cookies
These cookies are necessary for the website to function and cannot be switched off on our Sites such as setting your privacy preferences and for security and network management. You may set your browser to block these cookies, but some parts of the Sites may not work.
Essential cookies| Name of Cookie | Purpose | Typical Duration |
|---|
| .AspNet.ApplicationCookie (or your organization's portal key, e.g. uoft) | Keeps you signed in to the member portal and waiver/kiosk portal. | Session; sign-in ends after your organization's inactivity timeout |
| .AspNet.ExternalCookie | Holds your sign-in for a short time while you log in with Google, Microsoft or your institution's account. (Fusion) | 5 minutes |
| .AspNet.Correlation.* | Protects single sign-on logins against forgery. (Fusion) | Session (removed after sign-in) |
| ASP.NET_SessionId | Maintains your session with the server, including the sign-in handshake. (Fusion) | Session |
| __RequestVerificationToken | Protects forms against cross-site request forgery. (Fusion) | Session |
| cookieControl, cookieControlPrefs | Remembers cookie notice acknowledgment and preferences (Fusion) | 360 / 365 days |
| AUTH_SESSION_ID, AUTH_SESSION_ID_LEGACY, KC_RESTART, KC_AUTH_SESSION_HASH | Track your progress through the sign-in process. (Sign-in) | Session |
| KEYCLOAK_IDENTITY, KEYCLOAK_SESSION (+ _LEGACY) | Keep your single sign-on session | Session |
| XSRF-TOKEN, cognito, cognito-fl, csrf-state | Secure the sign-in page and keep the sign-in session. (Club, Play, Amazon Web Services) | Session to ~1 hour |
| Local storage: authToken, refreshToken | Stores sign-in tokens so the portal can access your account. (Fusion) | Until you sign out |
| Local storage: FlutterSecureStorage and FlutterSecureStorage.* (access_token, refresh_token, id_token, expires_in) | Stores encrypted sign-in tokens so you stay signed in. (Club) | Until you sign out |
| Local storage: fusiongo#AppEnvironment.production and .idToken, .accessToken, .refreshToken, .accessTokenExpiry, .refreshTokenExpiry | Stores encrypted sign-in tokens so you stay signed in. (GO) | Until you sign out |
| Local storage: …pkce_code_verifier, …oauth_state | One-time security values that protect the sign-in redirect. (GO) | Removed immediately after sign-in |
| Local storage: FlutterSecureStorage.Region | Remembers whether your account is in the US or Canadian data region. (Club, GO) | Persistent |
| Local storage: clientKey, organizationName | Remembers which organization's portal you are using. (Fusion) | Persistent |
| Local storage: FlutterSecureStorage.BlockedRoute, …BlockedTimeStamp | Returns you to the page you were trying to open after you sign in. (Club) | Used within 5 minutes |
| Session storage: isNewAccount, IsOrderRecovered, cartItemRemoved | Shows one-time confirmation messages (account created, order recovered, item removed). (Fusion) | Until the browser tab is closed |
| _GRECAPTCHA (and Google cookies such as NID) | Google reCAPTCHA: protects sign-in, sign-up and registration forms from bots, when your organization enables it. (Fusion) | 6 months |
| __stripe_mid, __stripe_sid | Stripe: fraud prevention during card payment. (Fusion) | 1 year / 30 minutes |
| Payment provider cookies (Moneris, Shift4, and hosted pages such as PayPal, Authorize.net, TouchNet, CyberSource, FreedomPay, Bambora, Global Payments and others) | Process your card payment securely; set by the payment provider your organization uses, on that provider's page or frame. (Fusion) | Set by the provider |
| c/side | Monitors scripts on payment pages to protect card data. (Fusion) | |
| Identity-provider cookies (Google, Microsoft, Apple, or your institution's sign-in) | Sign you in with an account you choose; set on that provider's site. (All) | Set by the provider |
Performance Cookies
These cookies allow us to count visits and traffics sources so we can measure and improve the performance of our Sites. They let us know which pages are the most and least popular and see how visitors move around our Sites. If you do not allow these cookies, we will not be able to measure performance of our Sites or use the information to improve our Sites.
Performance cookies| Name of Cookie | Purpose | Typical Duration |
|---|
| _ga, _ga_380448126, _ga_P95ZS53NF7, _ga_BHC2HZR4H5 | Google Analytics counts visits and traffic sources and shows how visitors use our website and Education Center. | 2 years |
| _ga, _ga_<ID> | Google Analytics shows how the Fusion member portal is used. Only set when your organization adds its own Google Analytics account. | 2 years |
Marketing Cookies
These cookies enable our Sites to provide enhanced functionality and personalization. They may be set by us or third parties whose services we have added to our pages to help us and third parties to deliver more relevant content. If you do not allow these cookies, some of the Services may not function properly.
Marketing cookies| Name of Cookie | Purpose | Typical Duration |
|---|
| hubspotutk | HubSpot recognizes your browser so the forms you submit on our website are linked to your contact record. | 6 months |
| __hstc | HubSpot tracks your visits to our website, including your first and most recent visit and how many sessions you have had. | 6 months |
| __hssc | HubSpot counts the pages you view in your current session. | 30 minutes |
| __hssrc | HubSpot detects when you restart your browser, to start a new session. | Session |
| HubSpot forms and call-to-action cookies | HubSpot shows the forms and calls to action on our website and records your submissions. | Set by HubSpot |
| Local storage: _gcl_ls | Google stores ad-click information so we can measure which campaigns lead to visits and sign-ups. | Persistent |
Targeting Cookies
These cookies may be set through our sites by our advertising providers. They may be used to build a profile of your interests and show you relevant advertisements on other websites. If you do not allow these cookies, you will get less targeted advertising.
Targeting cookies| Name of Cookie | Purpose | Typical Duration |
|---|
| guest_id, personalization_id and other X (Twitter) cookies | X: shown only if your organization adds an X timeline to its portal; X may use them to personalize content and ads. (Fusion) | Up to 13 months |
| _fbp | Meta Pixel: identifies browsers so Meta can measure our ads and show you Fusion ads on Facebook and Instagram (pixel ID 344266061968965). (fusionfamily.com) | |
| fr and other Meta cookies on facebook.com | Meta: ad delivery and measurement, set on Meta's own domain. (fusionfamily.com) | |
| Local storage: lastExternalReferrer, lastExternalReferrerTime | Meta Pixel: remembers which external site referred you, for ad attribution. (fusionfamily.com) | |
How to set or change your cookie settings
You may change and manage your cookie preferences in a few ways.
In the cookie preference center: You can visit the cookie preference center in the footer and update your preferences there.
Most web browsers let you control most cookies through browser settings. To find out more about cookies, including how to see what cookies have been set, visit www.aboutcookies.org or www.allaboutcookies.org. For more information on how to control your cookies on your web browser, refer to the following pages on popular web browsers: Google Chrome, Microsoft Edge, Mozilla Firefox, Opera, and Apple Safari.
Please note that if you choose to block all cookies (including essential ones), our Sites may not function correctly.
Changes to this Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in our practices or for other operational or legal reasons.
Contact Us
If you have any questions about our use of cookies, please contact us via email at product@fusionfamily.com
