Cookie Policy

Needed to run Highlights

These keep you signed in (or in your guest session), make checkout and payment fraud prevention work, and remember what you've entered.

__Secure-better-auth.session_token

Keeps you signed in, or in your guest session.

Set by Highlights · Lasts 90 days

__Secure-better-auth.session_data

A short-lived copy of your session, so pages load faster.

Set by Highlights · Lasts 5 minutes

__stripe_mid, __stripe_sid

Payment fraud prevention on checkout.

Set by Stripe · Lasts 1 year; 30 minutes

hl_order, hl_paid_* (session storage)

Remembers your checkout in this tab.

Set by Highlights · Lasts until you close the tab

hl_guest (local storage)

Remembers the name and email you entered on an invite, so you don't type them again.

Set by Highlights · Lasts until you clear site data

hl_optout

Remembers that you opted out of ad measurement on Your Privacy Choices.

Set by Highlights · Lasts 400 days

In the apps, your sign-in is kept in your device's secure storage.

Measurement

These count visits and show us how Highlights is used, so we can improve it.

ph_<project key>_posthog (cookie and local storage)

Product analytics and session replay, with what you type masked: joins up the pages and events of a visit.

Set by PostHog, through highlights.ai · Lasts 1 year

_ga, _ga_<property id>

Traffic statistics for highlights.ai.

Set by Google Analytics 4 · Lasts 2 years

hl_touch (session storage)

Remembers which link or campaign brought you.

Set by Highlights · Lasts until you close the tab

In the apps, PostHog keeps an anonymous identifier on your device for the same purpose.

Google Analytics 4 is a web analytics service from Google LLC. Google uses the data to track and examine use of highlights.ai, prepare reports on it and share them with other Google services, and may use it to contextualize and personalize ads in its own advertising network. IP addresses are used at collection time and discarded before data is logged. See Google's privacy policy and the opt-out add-on.

Advertising measurement

_fbp, _fbc

Tells us which Meta ads led to visits and purchases on highlights.ai (_fbc only after a click on a Meta ad).

Set by the Meta Pixel · Lasts 90 days

Meta may also use this data under its own privacy policy. Google Analytics, above, also measures our ads.

Google Analytics and the Meta Pixel don't load when your browser sends a Global Privacy Control or Do Not Track signal, or after you opt out on Your Privacy Choices.

How to control trackers

• Opt out on Your Privacy Choices. Google Analytics and the Meta Pixel stop loading on highlights.ai in that browser.
• Send a privacy signal. Turn on Global Privacy Control or Do Not Track in your browser, and Google Analytics and the Meta Pixel won't load on highlights.ai.
• Browser settings. Block or delete cookies and other stored data in your browser: Chrome, Firefox, Safari, Edge. Deleting your browsing history also clears other trackers your browser stores.
• Device settings. On phones and tablets, you can limit some trackers in your device's advertising and tracking settings.
• Provider opt-outs. Use the Google Analytics opt-out add-on, the choices described in each provider's privacy policy, or contact the provider.

You're free to decide which trackers to allow. If you block the ones needed to run Highlights, signing in and checkout won't work.

Who we are

We can't fully control third-party trackers, so what this page says about them is indicative; their providers' privacy policies have the complete information. If you'd like to know more about how Highlights uses these technologies, contact us.