Cookie policy
1. The short version
This site sets no cookies at all until you accept them. Nothing measures you, and nothing is shared with an advertiser, unless you have said yes on the banner.
Refusing is one click, exactly like accepting, and refusing costs you nothing: the site and the app work identically either way.
You can change your mind at any time through Cookie preferences, at the bottom of every page.
2. What a cookie is here
A cookie is a small file a site asks your browser to keep. We use them for two things only: remembering the choice you made on the banner, and — if you allow it — measuring which parts of this site lead people to subscribe, so we know where to spend an advertising budget.
Cookies are set on .startwithlisa.com, which means the same choice applies to
this site and to the application at app.startwithlisa.com. You decide once.
3. Every cookie, and what it does
Strictly necessary — set without asking
These are exempt from consent under the ePrivacy Directive, because without them the service cannot do what you asked of it.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
axeptio_authorized_vendors, axeptio_cookies | Axeptio (our consent tool) | Records the choice you made on the banner, so you are not asked again on every page | 6 months |
| Firebase Authentication session | Google Firebase | Keeps you signed in to the application. Only set once you have an account | Session, or up to 1 year if you stay signed in |
Audience measurement — only if you accept
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
ph_*_posthog | PostHog | Distinguishes one visitor from another so we can count how many people reach each step. Hosted in the European Union | 12 months |
Advertising — only if you accept
These let Meta and TikTok recognise that someone who clicked one of our ads later subscribed, so their systems learn who to show the ad to. They are set by our own code on our own domain, but the information is shared with those companies.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
_fbp | Meta Pixel | Identifies your browser to Meta | 90 days |
_fbc | Meta Pixel | Records that you arrived from a Meta ad | 90 days |
_ttp | TikTok Pixel | Identifies your browser to TikTok | 13 months |
4. What is never shared
No health information ever reaches an advertising platform. Not your condition, not a symptom, not an answer you gave in the questionnaire, not a message you sent the coach, not the content of your plan.
What is shared, and only if you accepted advertising cookies, is that an anonymous browser reached a step: created an account, started a checkout, or subscribed — plus the amount of a subscription. Your email address, when it is shared, is sent only as an irreversible SHA-256 fingerprint, computed on our servers, so the platform can recognise an existing customer without us handing over the address itself.
We do not sell your data, to anyone, ever.
5. Measurement that happens on our servers
Some of the events above are sent from our servers rather than from your browser, because a payment completes on Stripe’s site and the browser is not there to see it.
This is not a way around your choice. Your decision is recorded against your account, and server-side events are not sent at all for anyone who refused advertising cookies. Refusing means refusing, in both directions.
6. Changing your mind
Use Cookie preferences at the bottom of any page. You can also delete cookies in your browser settings, though that will also erase the record of your refusal, so you will be asked again.
We ask again at most once every six months if you refuse, and your acceptance is remembered for a maximum of thirteen months, after which we ask afresh.
7. Questions
Write to arnaud.autran@kaptor.io. The privacy policy covers the rest of what we do with personal data, including your rights of access, correction and deletion.