Cookies and browser storage
Last updated 8 November 2026
The short version. Bennu uses a few essential cookies and some browser storage to keep you signed in and make the app work. With your permission, we also use ad cookies from Meta (Facebook and Instagram) and TikTok, so we can tell which of our ads bring people to Bennu. We also ask before remembering which ad or link brought you here. Neither happens unless you tap Accept, or turn it on under Choose. You can change your mind at any time.
1. Your choice
The Privacy and Electronic Communications Regulations (PECR) say a website must ask before storing anything on your device, unless it is strictly necessary for a service you asked for. So the first time you visit, we ask:
- Accept turns everything on.
- Only essential keeps the cookies and storage Bennu needs to work, and nothing else.
- Choose lets you decide for each of these:
- Essential: keeps you signed in and remembers your choice. Always on.
- Which ad or link brought you here: kept with your account, so we know which ads are worth paying for (section 3).
- Meta and TikTok ad cookies: lets Meta and TikTok measure our ads and show them to people like you (section 3).
Essential cookies and storage are always on, because Bennu can’t sign you in or keep itself secure without them. Until you choose, we only read the ad tags in the link you arrived by into the open page, and we forget them if you say no. Nothing for ads loads, and nothing is sent to Meta or TikTok, until you say yes.
We ask again after 180 days.
2. Essential cookies
| Name | What it’s for | How long |
|---|---|---|
sb-…-auth-token | Keeps you signed in. Set by our sign-in service. It may be split into parts ending .0, .1 and so on | Up to 400 days, renewed while you use Bennu. Removed when you sign out |
sb-…-auth-token-code-verifier | A one-time security check while you sign in with an email link or Google | Until sign-in finishes |
bennu_ref | Only set if you open a friend’s invite link. Remembers their 8-character invite code so you get your discount when you sign up. Nothing else | 30 days |
bennu_consent | Remembers your cookie choice and when you made it, so we don’t ask on every visit. Holds only yes or no for each group and a date | 180 days |
bennu_dev | Strictly necessary: prevents fraud in the service you asked for. Only set once you’re signed in and Bennu’s rewards load. A random code for this browser, which our server keeps only as a scrambled code. It is used only to spot one person running several accounts to collect rewards or referral credits, never for analytics, ads or anything else. It can’t be read by any script on the page | 90 days |
All of these are first-party cookies, which means only Bennu can read them.
3. Ad cookies (only if you say yes)
We advertise Bennu on Facebook, Instagram and TikTok. With your permission, these cookies show us which ads and links bring people to Bennu, so we spend less on ads that don’t work and can show our ads to people likely to find Bennu useful. We don’t use them inside the app to watch what you do with your posts.
Which ad or link brought you here
| Name | What it’s for | How long |
|---|---|---|
bennu_attr | Bennu. Remembers the campaign tags (utm_source, utm_medium, utm_campaign and similar) and ad click ID (fbclid, ttclid or gclid) from the link you first arrived by, plus the page you landed on and the site you came from (its name only). When you make an account, this is saved with it | 90 days |
Meta and TikTok ad cookies
| Name | Who and what it’s for | How long |
|---|---|---|
_fbp | Meta Pixel. Recognises your browser so Meta can tell us an ad led to a visit or sign-up | 90 days |
_fbc | Meta Pixel. Remembers the Facebook or Instagram ad you clicked (from the fbclid in the link) | 90 days |
_ttp | TikTok Pixel. Recognises your browser so TikTok can tell us an ad led to a visit or sign-up | 13 months |
bennu_vid | Bennu. A random code for your browser, so a website you paste can be linked to a later sign-up | 30 days |
bennu_px | Bennu. A short list of up to 5 events our server has just sent, so the pixel in your browser doesn’t count them twice | 1 hour |
What we send to Meta and TikTok
With your permission, the pixels in your browser and our server tell Meta and TikTok when you do certain things, such as visiting our site, pasting your website, signing up, starting your free posts or paying. The pixels only run on our public pages (the home page, pricing and the free start), never inside the app, on connect links or on admin pages. Along with that, our server sends:
- your email address, hashed first. Hashing turns it into a scrambled code (SHA-256) before it leaves our server, so the email itself is never sent. Meta and TikTok can still match the code to an account they hold, which is why the law treats it as personal data and why we only send it with your permission
- a hashed Bennu code for your account or browser
- the Meta and TikTok cookies above and the TikTok click ID
- your IP address and browser type
- the page address, without the part after the question mark
- only these details about what you did: the plan, monthly or yearly, the amount and currency, which set-up step, and counts and formats of posts
We never send your posts, photos, business details or anything else from inside the app. The Google click ID (gclid) is kept with your account and never sent to anyone.
If you paste your website but don’t sign up, we send one “didn’t sign up” event 24 hours later. To do that we keep a short record of your browser code, your Meta and TikTok cookie values, your IP address and browser type. The IP address and browser type are removed after 14 days and the record is deleted after 30.
Meta and TikTok decide for themselves how they use this information once they have it, for example to measure and improve ads, under their own privacy policies: Meta Privacy Policy and TikTok Privacy Policy. Our privacy policy explains their role and where the data goes.
If you choose Only essential, none of this happens: the pixels don’t load, we don’t keep ad tags or click IDs, and our server sends nothing to Meta or TikTok about you.
4. What Bennu remembers in your browser
The app also keeps a few small notes in your browser’s storage (local storage and session storage). They stay on your device and are not sent to us or anyone else, except your set-up answers, which are sent when you create your account.
Local storage stays until you clear it. Session storage is cleared when you close the tab.
| Name | What it remembers | Type |
|---|---|---|
bennu.draft | Your set-up answers before you make an account: your website, brand card, style choices, platforms and first name, so you don’t type them twice. Ignored after 7 days | Local |
bennu.introduced | That Bennu has introduced itself during set-up | Local |
bennu.deck.top | Which post was on top of Ready for you, so you come back to it | Local |
bennu.adVariant | Which kind of business the ad you came from was for (like "salons"), so Bennu's first words match it. Never anything about you | Local |
bennu.live.seen | The newest live post Bennu has already celebrated with you | Local |
bennu.nest | How big your nest has grown (Twigs to Golden nest), so every page shows the same | Local |
bennu.nest.open | Which sections of your Nest you left open, so they stay that way | Local |
bennu.examples.seen | Which example posts you saw on our site in the last day (example codes only), so we can tell which examples lead to free posts. Only if you say yes to analytics | 1 day |
bennu.coachSeen | That you have seen the first-time swipe hint | Local |
bennu.edit.<post> | A change you started typing for a post but haven’t sent yet | Local |
bennu.carouselNudged | That the one-off “there’s more” carousel peek has played | Local |
bennu.install.offered | That we have shown the “add to home screen” tip on this device | Local |
bennu.pip.off | That you switched Bennu’s pop-up tips off (Quiet Bennu) | Local |
bennu.pip.quiet | The day you asked Bennu to stay quiet | Local |
bennu.pip.log | When Bennu last showed a tip, so it shows at most 1 a day and 6 a week | Local |
bennu.pip.rare | When Bennu last showed each tip that should only come up once a month | Local |
bennu.pip.seen | Tips already shown during this visit | Session |
bennu.autopost.offered | When Bennu last offered to post without waiting for you, so it asks at most once a month | Local |
bennu.spot.once | One-off messages from Bennu you have already seen | Local |
bennu.greeted | That Bennu has said hello during this visit | Session |
bennu.lastVisit | When you last opened the app on this device, so Bennu can say “Welcome back” | Local |
bennu.celebrated | Weeks that have already had their celebration | Local |
bennu.voice.<set> | Which lines Bennu said recently, so it doesn’t repeat itself | Local |
bennu_pick | The plan you picked on the pricing page, until you reach the payment step | Local |
bennu.hatched | That the egg-hatching moment has played, so it only shows once | Local |
bennu_hi | Which welcome line on the home page you saw last, so you get a different one next time | Session |
bennu_pw_seen | That you have seen the plans page before on this device | Local |
bennu.wrapped.auto | The code of the last weekly Wrapped that opened by itself on this device, so each one only opens once | Local |
bennu.wrapped.shone | The codes of up to 20 Wrapped recaps whose “best yet” shine has played | Local |
bennu.badges.shone | Badges whose shine has already played in your Nest | Local |
bennu.quests.flown | Quests already shown as done on this device, so each one celebrates once | Local |
bennu.referral.month | The month Bennu last suggested inviting another business, so it asks at most once a month | Local |
bennu.skin | Which look you picked for Bennu, so it shows straight away | Local |
bennu.trip.back | The last research trip whose return Bennu has already told you about | Local |
bennu.rive | A testing switch for Bennu’s animations, set only by a special link our team uses (?rive=). Nothing about you | Session |
bennu.waiting | How many posts are waiting for you, so every tab shows the same count during this visit | Session |
bennu_connect_token | On a connect link someone sent you, the link’s code, in case logging in to a social network drops it from the address | Session |
bennu_voice_token | On a team voice link, the link’s code, so the page still works if it reloads | Session |
Some things are counted with nothing stored on your device, so they need no cookie and no choice: searches and “Was this helpful?” votes in our help centre, and daily visit totals for our public pages. Voice notes and “Tell Bennu more” add nothing to your browser either.
Your browser also registers a small background script (a service worker). It shows Bennu’s notifications if you turn them on, and keeps one “You’re offline” page to show when you lose your connection. It doesn’t store anything else or track you.
5. Other companies’ services
- Cloudflare Turnstile checks that you are a person, not a bot, when you read a website, start your free posts or sign up by email. It runs from Cloudflare’s own site and looks at signals from your browser. It is used only for security. See Cloudflare’s Turnstile privacy policy.
- Stripe sets its own cookies on its checkout and billing pages, to take payment safely and prevent fraud. See Stripe’s cookie policy.
- Google sets its own cookies on its sign-in page if you choose “Continue with Google”.
6. Changing your mind
- To withdraw your permission, or give it later, tap Cookie settings at the bottom of any page and choose again. Choosing Only essential, or unticking a group, removes
bennu_attr,bennu_vid,bennu_px,_fbp,_fbcand_ttpas needed and reloads the page, so a pixel that had loaded stops. Our server stops sending anything more about you to Meta or TikTok, and deletes the short record it keeps when you paste a website. - If you’re signed in, your account’s choice changes too. Saying no to “which ad or link brought you here” deletes the ad details saved with your account. Saying no to Meta and TikTok ad cookies removes the Meta and TikTok codes from them.
- Withdrawing doesn’t undo what was sent before. To ask about that, email help@heybennu.com, or use the tools Meta and TikTok offer in their own settings.
- You can also delete cookies and browser storage in your browser’s settings. If you delete the sign-in cookie, you’ll need to sign in again. If you delete your cookie choice, we’ll ask again.
- You can switch Bennu’s tips off in Account, and turn notifications off in your phone or browser settings.
7. Changes
We update this page whenever we add or change a cookie or a storage key. Questions to help@heybennu.com. Our privacy policy explains how we use personal data more generally.