Your data
on Hilights.

Browsing and saved items

You can browse Hilights without an account. Guest shopping lists, bags, theme choices and local recovery copies are saved in this browser. Clearing site data removes those local copies. Offline pages show saved needs, not current prices.

Signing in

When Google, Microsoft or Facebook sign-in is available and you choose it, the provider shares the identity information approved on its consent screen, such as email, name and profile details. Hilights does not request access to your inbox or ask for your email password. Authentication is handled by Supabase.

Your signed-in shopping list and bag are stored privately with your account to support returning on another device. Session cookies keep you signed in. You can choose whether to bring current guest items into the account. Signing out restores the device’s guest items; it does not delete the cloud account or local recovery copies.

Sale alerts

Browser notifications are optional and require separate permission. Enabled devices store a push subscription and chosen product or shopping-list preferences. You can stop individual alerts or all device alerts in My alerts. Device subscriptions expire after 90 days unless renewed; delivery records are retained for 30 days. Signing in does not automatically enable or transfer these subscriptions.

Shopping activity

Hilights records shopping activity such as product views, outbound retailer clicks, referral sources and campaign information to understand which deals are useful. Browser identifiers and ordinary hosting/security logs may be used to operate and measure the service.

Buying from brands

Retailer websites handle purchases, payments, delivery and returns under their own policies. Hilights does not take your retailer checkout payment details.

Your choices and requests

You can remove saved items, turn off alerts, sign out and clear this browser’s site data. For questions or requests about account data, contact Hilights through its official social accounts linked below. Do not send passwords or payment details. On shared devices, sign out and clear stored site data if you do not want local recovery copies to remain.

Facebook connection and data deletion

To stop sharing Facebook account information with Hilights, remove Hilights from Facebook’s Apps and websites settings. Removing the connection does not by itself delete your saved Hilights account data.

To request deletion of your Hilights account and its saved list and bag, message Hilights’ official Facebook page or Instagram account and ask to delete your account data. Include the email associated with your Hilights account so we can identify it. We may ask you to verify account ownership before acting on the request. Never send your Facebook password, sign-in codes or payment details.

To remove copies on this device, sign out of Hilights, stop any device alerts in My alerts, then clear Hilights’ stored site data in your browser. Signing out alone keeps local recovery copies.