Cookie policy

Your choices, and how to change them

On our marketing site (keelgrc.com) analytics and marketing cookies are off by default. Nothing in those categories loads until you accept it. When you first visit you will see a banner to accept all, reject all, or choose by category. You can revisit that choice any time from the Cookie preferences link in the footer.

We also honor browser opt-out signals: if your browser sends a Global Privacy Control (GPC) or Do Not Track signal, we leave the optional categories off. You can additionally block or delete cookies in your browser settings; blocking the optional categories does not affect your ability to use the site.

In the Keel app (app.keelgrc.com) we currently run no analytics at all. There is no product analytics tool, no session recording and no advertising tag in the signed-in product - only the strictly necessary sign-in, workspace and display-preference cookies listed below. Google Analytics, Microsoft Clarity, Metricool and the Meta Pixel run on this marketing site only; none of them is used in the app.

Server-side ad measurement. When you start a trial, our servers send Meta one conversion event containing a hashed version of your account email address, so we can measure signups from our own advertising. No Meta script runs in the app and no advertising cookie is set there - this is a server-to-server call. The raw email address never leaves our servers.

Server-side analytics. If you accepted analytics on keelgrc.com, the _ga cookie that Google Analytics set there is also sent to app.keelgrc.com. When you create a workspace, our servers read it and send Google Analytics two events, sign_up and trial_start, with your plan. No Google script runs in the app and the app sets no analytics cookie. If the _ga cookie is absent because you declined analytics, nothing is sent.

The app still asks, and the analytics category is still there - it just loads nothing today. We have kept the consent mechanism in place rather than removing it, so that if we ever add an optional tool to the app it cannot load before you have accepted the category. Until then there is nothing behind that category to load, whichever way you answer it. The app honors Global Privacy Control and Do Not Track the same way this site does - it leaves the optional category off and tells you so in the preferences dialog.

This site and the app hold separate choices. Your consent is stored in a cookie scoped to the single hostname that set it, so the Cookie preferences link in this site’s footer governs keelgrc.com only - it does not carry over to app.keelgrc.com, and answering one leaves the other unanswered. To review or change your choice in the app, open Settings and use Manage cookie preferences in the “Privacy & cookies” card.

One limit worth stating plainly: withdrawing consent stops further collection but does not delete cookies these vendors have already set. Keel cannot reliably remove another party’s cookies, so clearing them in your browser settings is the only complete removal.

Strictly necessary

These are needed for the site and app to work, or they hold a choice you asked us to remember. They are always on and are not used for advertising.

• keel_consent (set separately on keelgrc.com and on app.keelgrc.com): stores your cookie choices so we can honor them. Each host keeps its own copy, so a choice made on one does not apply to the other. Expires after 180 days.
• keel_theme (app.keelgrc.com): remembers whether you picked the light, dark or black theme, so your pages arrive already in it. The same value is also kept in your browser’s localStorage under keel-theme. We set no domain on it, so it stays on the app host and is never sent to this marketing site. Expires after 1 year.
• keel_density (app.keelgrc.com): remembers whether you picked comfortable or compact row spacing. The value is also kept in localStorage under keel-density, and like the theme cookie it stays on the app host. Expires after 1 year.
• keel-theme (browser localStorage on keelgrc.com): remembers your theme choice on this marketing site. Here it lives in localStorage and we set no cookie for it. Persists until you clear it.
• Clerk session (__session, __client_uat and related, on app.keelgrc.com): keep you signed in to the product. Session and short-lived cookies.
• keel_active_org (app.keelgrc.com): remembers which workspace you are working in. Functional, session length.
• keel_setup_dismissed (app.keelgrc.com): remembers that you dismissed the onboarding checklist. Expires after 180 days.
• Cloudflare Turnstile / bot management (e.g. __cf_bm): protects our forms and infrastructure from abuse. Short-lived, security purpose.

Analytics (opt-in)

These help us understand how this marketing site is used so we can improve it. They load only after you accept the analytics category, and every one of them is limited to keelgrc.com - none runs in the signed-in app. We do not sell this data.

• Google Analytics 4 (_ga, _ga_*): aggregate traffic and engagement measurement. Expires after up to 2 years. We enable IP anonymization.
• Microsoft Clarity (_clck, _clsk): usage analytics and session recording, on this marketing site only - not in the signed-in app. Clarity records your browsing session here and replays it to us: the pages you view, pointer movement, scrolling and clicks, and the page as it appeared. Form-field values, and text containing a digit or an “@”, are redacted; the URL of each page you visit is recorded. _clck lasts about 1 year; _clsk is short-lived. Clarity is also configured to read two Microsoft Advertising cookies - _uetmsclkid and _uetvid - if they are already present in your browser, and to send their values with the session. Clarity does not set those two and does not load Microsoft Advertising’s tag; they exist only if a Microsoft Advertising tag has set them, so we state no lifetime for them.
• Metricool (tracker.metricool.com): traffic and marketing-performance measurement on this marketing site only. It is not used in the signed-in app.

There is no analytics entry for the app, because the app currently runs no analytics tool. Keel used a product-analytics tool in the signed-in app until August 2026. It was removed and nothing replaced it, so no such cookie is set any more; a copy already in your browser from before then is inert and can be cleared in your browser settings. The app’s analytics category remains in place and gates nothing today - if we add a tool we will list it here, and it will not load until you accept that category.

Marketing

These help us measure and improve our advertising. The Meta Pixel and keel_utm load only after you accept the marketing category.

• Meta (Facebook) Pixel (_fbp): measures the effectiveness of our advertising. Expires after about 90 days.
• keel_utm (keelgrc.com): stores the first campaign that referred you (the utm_* parameters) so we can attribute an enquiry to it. Expires after 90 days.

Until October 2026 this site also set partner referral cookies: FirstPromoter’s _fprom_ref, _fprom_tid and _fprom_details, and our own keel_fpr. We no longer set or read them. A copy still in your browser does nothing and can be cleared in your browser settings.

Third-party cookies

The analytics and marketing tools above are provided by Google, Microsoft, Meta and Metricool, who act as third parties and set their own cookies on this marketing site only once you enable the matching category. Their use of data is governed by their own privacy policies. The providers we rely on to run Keel are listed on our sub-processors page.

Changes

As our tools change we will update this page and, where the categories change, ask for your consent again. Questions? Email privacy@keelgrc.com.