Cookie Policy

Your cookie choices#

We ask separately about analytics and ad measurement. Optional analytics uses PostHog (EU Cloud) and Google Analytics to understand visits, signup, setup, repeat use, referrals and subscriptions. On this website it includes PostHog session recordings (scrolling, clicks and what appears on screen, with form entries hidden), kept for 30 days. Optional ad measurement uses the Reddit Pixel, Meta Pixel, LinkedIn Insight Tag and X Pixel, where configured, to measure our ads. Where configured, linked Google Ads imports consented GA4 sign-up, verified-install and paid-subscription events, and can show our ads to people who visited our site. The conversions APIs of Meta, Reddit and LinkedIn also measure accepted leads, verified registrations and successful paid subscriptions from our server. These ad providers receive events only while ad measurement is on. A previous analytics choice does not grant ad measurement permission. With analytics off, PostHog still counts visits anonymously without setting any cookie or using browser storage, so that choice never stores anything on your device. Inside the Shopify admin, Benson's app uses PostHog held in memory only (no cookie, no browser storage), never Google Analytics or an ad pixel, and only while your Benson account's analytics choice is on.

Where you browse from sets the starting point. In the EEA, the UK, Switzerland, Brazil, Quebec, and the territories and microstates that follow EU or UK rules, nothing optional runs until you allow it, and we ask the same way if we can't tell where you are. Everywhere else, analytics and ad measurement start on and you can turn either off. If your browser sends a Global Privacy Control signal, ad measurement starts off.

We save your choices in the benson_analytics and benson_ads cookies for six months, shared across trybenson.com and its subdomains. Outside the regions that ask first, a functional benson_region cookie notes that for 30 days so optional cookies can start on; we remove it when you browse from a region that asks first. If you follow a Benson invite link, a functional bn_via cookie holds that invite's code for 30 days, also shared across trybenson.com and its subdomains, so the invite's offer reaches sign-up. It isn't used for analytics or advertising. Browsers used by Benson's own staff carry a functional benson_internal cookie for a year, so our own visits are left out of our measurements. With analytics on, Google Analytics uses _ga cookies and PostHog uses ph_ storage to recognise visits. The analytics client also stores anonymous and signed-in account identifiers (__anon_id, __user_id and __user_traits). With ad measurement on, Google may use _gcl_ click-measurement storage for linked Ads conversion measurement. The Reddit Pixel uses the _rdt_uuid cookie and, after a Reddit ad click, _rdt_cid (both 90 days), plus _rdt_ session storage. Meta uses _fbp and, after a genuine Facebook ad click, _fbc, for up to 90 days. X uses first-party _twclid, _twpid and _twsid cookies for click attribution and browser/session measurement. Session recording, automatic form matching, X advanced matching and Google signals are disabled, and Google's advertising features stay off while ad measurement is off. We do not pass form contents, email addresses, phone numbers, postal addresses or private link tokens to these providers.

Meta receives public page URLs without query strings, browser and ad-click identifiers, IP addresses and browser information. For consented account conversions, it can also receive a one-way hash of the Benson account identifier, and for purchases the value and currency. Reddit and LinkedIn receive the same conversions from our server, with their own ad-click identifiers (and Reddit's cookie identifier), IP address information (only as a one-way hash for LinkedIn), a one-way hash of the Benson account identifier, and for purchases the value and currency. LinkedIn's Insight Tag receives permitted public page visits and browser information and can use LinkedIn cookies to match visits to members. X receives consented public page visits and X click attribution identifiers from approved campaign URLs; its automatic advanced matching is disabled. Where configured, Google Ads receives the three consented GA4 conversion events and bounded Google click identifiers; Google signals stays disabled. This tracking applies to Benson's own marketing and signup flows; we do not install these advertising pixels on merchant storefronts or track private dashboard pages with them.

For consented server conversions, we keep the matching context for up to six months. Pending conversion delivery records expire after seven days. LinkedIn explains the purpose and lifetime of its cookies in its Cookie Policy.

Benson's own demonstration loader uses the session storage below:

Key	Where	What it's for	How long
bn_s, bn_ctx, bn_hb, bn_x	Session storage	Benson measuring this site, with a session-only id. This demonstration loader never writes anything that lasts beyond the tab. Optional product analytics is controlled separately.	Until you close the tab

Cookie preferences are separate from marketing email choices. Use the Cookie preferences icon at the bottom left to turn analytics or ad measurement off independently, or change either choice at any time. Turning one off stops the corresponding tracking and removes provider storage accessible on Benson's domain. We cannot clear cookies on another provider's domain. Withdrawing ad measurement also asks our server to clear your signed-in account's saved matching context and pending conversions; if that request cannot connect, your next signed-in request applies the change.

Benson on the stores that use it#

When a store installs Benson, our script runs on that store's website, and the store decides how it asks shoppers for consent. Benson follows that decision:

• Where consent isn't required, or once a shopper agrees, Benson may keep a session and an anonymous visitor id in local storage, and a first-party cookie that lets the store's checkout link an order to a session.
• Until then, Benson keeps only a session-only id that ends with the tab, and writes no cookies and nothing that lasts.
• In strict mode, it keeps everything in memory and sends nothing until the shopper agrees.

This is the full list of what Benson can store on a store's website:

Key	Where	What it's for	Needs consent?
bn_s	Local storageSession storage until consent allows local storage	Current session id and timing (ends after 30 minutes idle or 24 hours).	No: session-scoped or functional
bn_v	Local storage	Anonymous visitor id and first-seen time, to count returning visitors.	Yes, where consent is required
bn_sid	Cookie	Session id shared with the checkout pixel so orders can be attributed.	Yes, where consent is required
bn_aff	Cookie	The affiliate partner that referred this session, shared with the store's checkout outside Shopify. Set only on stores that lock a partner's code to that partner.	Yes, where consent is required
bn_ca	Session storage	Which Benson cart attributes were already written to the current cart.	Yes, where consent is required
bn_hb	Local storageSession storage until consent allows local storage	When the install heartbeat was last sent (at most every 30 minutes).	No: session-scoped or functional
bn_ctx	Session storageMemory only until consent allows session storage	Landing page, referrer site, and campaign parameters of the current session.	No: session-scoped or functional
bn_debug	Session storage	Debug logging switch, set only when a developer calls Benson.debug().	No: session-scoped or functional
bn_x	Local storageSession storage until consent allows local storage	Memory of the current session: which shopping extensions were already reported (so a page change doesn't report them twice), whether the visit arrived from a paid ad or affiliate link, which of the store's tools Benson loaded, and which side of a test or tool measurement the visit is in.	No: session-scoped or functional
bn_nd	Session storage	Set when a visitor dismisses the store's note for AI shopping assistants, so it stays hidden for the rest of the visit.	No: session-scoped or functional
bn_xt	Local storage	Which side of a tool measurement this visitor was in on earlier visits (the tool shown or held back), so later orders count toward the right side. Kept only with consent; deleted when consent is withdrawn or the measurement ends.	Yes, where consent is required
bn_ext	Cookie	A signed note that a coupon extension was seen in this browser, so the store's checkout can apply its discount-code policy (30 days).	Yes, where consent is required
bn_wc	Cookie	WooCommerce only (the Benson plugin): the session id, the coupon extensions detected in it, the store's tools Benson loaded and which side of a test or tool measurement the visit is in, read when an order is placed so the order is linked to its session. Renewed on each page; expires after 30 minutes.	Yes, where consent is required
bn_w	Session storage	How often the discount widget opened itself in this session (and, without consent, when it was last closed).	No: session-scoped or functional
bn_wf	Local storageSession storage until consent allows local storage	When the discount widget was last closed and how often it opened itself, so it doesn't pop up again too soon.	Yes, where consent is required
bn_pending_code	Session storage	A discount code chosen in the widget, kept until a page with the store's promo box can fill it in.	No: session-scoped or functional
bn_pr	Session storageMemory only until consent allows session storage	Which known coupon extensions are installed in this browser, checked once per visit on desktop Chrome and Edge, so later pages don't check again.	Yes, where consent is required

Stores can read how each consent mode works in Consent and storage.

Changing your mind#

Clearing your browser storage removes everything listed above. On a store's site, use that store's cookie settings.

Contact#

Questions: [email protected].