Cookie Policy
The small set of cookies and browser storage the application actually uses — no advertising or analytics trackers.
- Effective
- September 30, 2026
- Last updated
- September 30, 2026
On this page
1. What We Use
HighwayTMS uses a small number of cookies and browser storage entries: what is needed to sign you in, keep your session secure, remember your cookie choice, and remember display settings you change yourself (such as light/dark mode). We do not use advertising or cross-site tracking technologies, and no analytics are loaded today.
On your first visit we show a cookie notice. Optional categories (preferences and analytics) are off by default and only switch on if you choose them in the cookie preference center.
2. Cookie & Storage Inventory
The list below is complete for the current release. “Cookie” entries are sent with requests to our servers; “localStorage” and “sessionStorage” entries stay in your browser and are never transmitted to us.
Strictly necessary
These are required for the Service to work and are always on. They do not need your consent.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| sb-*-auth-token | First-party cookie (Supabase Auth); may be split into numbered parts | Holds your authenticated session so you stay signed in and the server can verify each request. Set and refreshed automatically by the authentication layer. | Persistent cookie; session validity is managed by Supabase Auth |
| hwtms_consent | First-party cookie | Remembers your cookie choices (version, preferences and analytics settings, and the time you chose) so we do not ask again on every visit. It contains no identifier and is not used to track you. | 6 months; SameSite=Lax; Secure over HTTPS |
| highwaytms:settings-return-href | sessionStorage entry (not a cookie) | Remembers the last workspace page you were on so “Back to app” returns you there after visiting Settings. | Until you close the browser tab |
Preferences
Display settings that you change yourself. They are written to your browser only when you use the control, are not sent to our servers, and are not used for tracking. Because you asked for them, we treat them as user-requested functional storage.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| loadboard-theme | localStorage entry (not a cookie) | Remembers your light/dark appearance choice on this browser. | Until you clear site data |
| highwaytms:nav-expanded:v2 | localStorage entry (not a cookie) | Remembers which sidebar groups you expanded or collapsed. | Until you clear site data |
| highwaytms:onboarding-widget-pos:v1 | localStorage entry (not a cookie) | Remembers where you moved the onboarding checklist on screen. | Until you clear site data or reset the position |
The “Preferences” switch in the preference center is reserved for optional personalization we may add later. We do not use any non-essential preference storage today.
Analytics and advertising
None today. We do not use analytics cookies, advertising cookies, social-media pixels, or third-party tracking technologies. If we add analytics, they will stay off until you opt in, and they will never load if your browser sends a Global Privacy Control signal.
Third-party pages you may visit
Signing in with Google and paying through Stripe Checkout or the Stripe billing portal take you to pages run by those providers. They set their own cookies under their own policies; we do not control them.
3. What We Do Not Use
- No Google Analytics, Meta Pixel, or similar analytics/advertising tags;
- No cross-site tracking or advertising profiles;
- No sale or sharing of cookie data with advertisers;
- No fingerprinting.
4. Consent & Your Choices
Cookie notice and preference center. On your first visit we show a notice with three choices: Accept all, Reject non-essential, or Manage preferences. Strictly necessary cookies are always on. Preferences and analytics are off until you turn them on. We store your choice in the hwtms_consent cookie for six months and then ask again.
Change your mind at any time. Use the “Cookie preferences” link in the footer of every page, or this button: . Choosing “Reject non-essential” withdraws consent for optional categories.
Global Privacy Control. If your browser or extension sends a Global Privacy Control (GPC) signal, we treat it as a valid opt-out request: analytics stays off and cannot be switched on while the signal is present, and we do not sell or share personal information for cross-context advertising regardless.
Browser controls. You can also block or delete cookies and site data in your browser settings. Blocking the strictly necessary cookies will prevent sign-in and core features of the Service from working.
5. Changes
We will update this policy if the cookies or storage technologies we use change, and we will ask for your choice again if we add a new optional category. The “Last updated” date above reflects the most recent revision.
6. Contact
Questions about this policy: support@highwaytms.com.
Questions about this document?
- Privacy questions: support@highwaytms.com