Cookie policy
1. The short version
No advertising pixel and no audience measurement tool runs in your browser, and nothing about you is shared with an advertiser, unless you have said yes on the banner. The only cookie set without asking is the one that remembers your choice.
Separately, our servers count, as totals only, how many visitors from each of our advertisements reach each step of sign-up, whether or not they accepted cookies. These totals contain no name, no email address, no identifier, no health information and no answer, and they are never sent to an advertising platform. Section 5 explains how this works and how to object.
Refusing is one click, exactly like accepting, and refusing costs you nothing: the site and the app work identically either way.
You can change your mind at any time through Cookie preferences, at the bottom of every page.
2. What a cookie is here
A cookie is a small file a site asks your browser to keep. We use them for two things only: remembering the choice you made on the banner, and — if you allow it — measuring which parts of this site lead people to subscribe, so we know where to spend an advertising budget.
Cookies are set on .startwithlisa.com, which means the same choice applies to
this site and to the application at app.startwithlisa.com. You decide once.
3. Every cookie, and what it does
Strictly necessary: set without asking
These are exempt from consent under the ePrivacy Directive, because without them the service cannot do what you asked of it.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
axeptio_authorized_vendors, axeptio_cookies | Axeptio (our consent tool) | Records the choice you made on the banner, so you are not asked again on every page | 6 months |
Stored in your browser without a cookie
These are not cookies, but they are kept in your browser in a similar way, so we list them here.
| Item | Kind | Purpose | Who | Duration |
|---|---|---|---|---|
| Firebase Authentication session | Browser storage | Keeps your progress in the questionnaire and, later, keeps you signed in to your account. Created when you start the questionnaire, before you give an email address | Everyone who starts the questionnaire | Until you sign out or clear your browser data |
lisa_funnel_angle | Local storage | Remembers which version of the questionnaire you arrived on, so the page you see matches the link you followed | Everyone who arrives on the questionnaire from one of our links | Until you clear your browser data |
lisa_attribution | Local storage | Keeps the campaign of the link you followed across the trip to the payment page | Only if you accepted audience measurement or advertising; removed otherwise | Until you clear your browser data or withdraw your consent |
lisa_ad_click | Session storage | Keeps the Meta advertisement you clicked while you read other pages of this site | Only if you accepted advertising | Until you close the tab |
Crash reports: sent without asking, and without a cookie
When a page of the site or the application fails, a crash report is sent to PostHog so that we can find and fix the fault. It is sent whether or not you accepted audience measurement, on the basis of our legitimate interest in a service that works. It stores nothing on your device: no cookie is set and nothing is read back from one. The report holds a technical description of the error, the version of the application, the page it happened on and, if you are signed in, your account identifier. It holds no health data, none of your answers and none of your messages. It is hosted in the European Union.
Audience measurement: only if you accept
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
ph_*_posthog | PostHog | Distinguishes one visitor from another so we can count how many people reach each step. Hosted in the European Union | 12 months |
Advertising: only if you accept
These let Meta and TikTok recognise that someone who clicked one of our ads later subscribed, so their systems learn who to show the ad to. They are set by our own code on our own domain, but the information is shared with those companies.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
_fbp | Meta Pixel | Identifies your browser to Meta | 90 days |
_fbc | Meta Pixel | Records that you arrived from a Meta ad | 90 days |
_ttp | TikTok Pixel | Identifies your browser to TikTok | 13 months |
4. What is never shared
No health information ever reaches an advertising platform. Not your condition, not a symptom, not an answer you gave in the questionnaire, not a message you sent the coach, not the content of your plan.
What is shared, and only if you accepted advertising cookies, is that an anonymous browser reached a step: created an account, started a checkout, or subscribed — plus the amount of a subscription. Your email address, when it is shared, is sent only as an irreversible SHA-256 fingerprint, computed on our servers, so the platform can recognise an existing customer without us handing over the address itself.
We do not sell your data, to anyone, ever.
5. Measurement that happens on our servers
Some of the events above are sent from our servers rather than from your browser, because a payment completes on Stripe’s site and the browser is not there to see it.
This is not a way around your choice. Your decision is recorded against your account, and no event about you is sent to Meta, TikTok or PostHog if you refused. Refusing means refusing, in both directions.
Campaign totals, for everyone. To run the questionnaire and the sign-up, our servers already record the campaign and advertisement numbers in the link you followed and which steps you reached. Once a night, they add these up into totals per advertisement, per campaign, per week and per version of the questionnaire, so we know which advertisements bring people who stay. Only the totals leave our database; they go to PostHog, in the European Union, with no identifier attached. A total smaller than a minimum we set is never shown on its own: it is withheld or merged with others. No cookie, pixel or tag in your browser is used for this, and nothing is sent to an advertising platform. You can object at any time: see the privacy policy, section 6.
6. Changing your mind
Use Cookie preferences at the bottom of any page. You can also delete cookies in your browser settings, though that will also erase the record of your refusal, so you will be asked again.
We ask again at most once every six months if you refuse, and your acceptance is remembered for a maximum of thirteen months, after which we ask afresh.
7. Questions
Write to hello@startwithlisa.com. The privacy policy covers the rest of what we do with personal data, including your rights of access, correction and deletion.