Cookie policy

Your choices, and how to change them

On our marketing site (keelgrc.com) analytics and marketing cookies are off by default. Nothing in those categories loads until you accept it. When you first visit you will see a banner to accept all, reject all, or choose by category. You can revisit that choice any time from the Cookie preferences link in the footer.

We also honor browser opt-out signals: if your browser sends a Global Privacy Control (GPC) or Do Not Track signal, we leave the optional categories off. You can additionally block or delete cookies in your browser settings; blocking the optional categories does not affect your ability to use the site.

In the Keel app (app.keelgrc.com) we currently run no analytics at all. There is no product analytics tool, no session recording and no advertising tag in the signed-in product - only the strictly necessary sign-in and workspace cookies listed below. Google Analytics, Microsoft Clarity, Metricool and the Meta Pixel run on this marketing site only; none of them is used in the app.

The app still asks, and the analytics category is still there - it just loads nothing today. We have kept the consent mechanism in place rather than removing it, so that if we ever add an optional tool to the app it cannot load before you have accepted the category. Until then there is nothing behind that category to load, whichever way you answer it. The app honors Global Privacy Control and Do Not Track the same way this site does - it leaves the optional category off and tells you so in the preferences dialog.

This site and the app hold separate choices. Your consent is stored in a cookie scoped to the single hostname that set it, so the Cookie preferences link in this site’s footer governs keelgrc.com only - it does not carry over to app.keelgrc.com, and answering one leaves the other unanswered. To review or change your choice in the app, open Settings and use Manage cookie preferences in the “Privacy & cookies” card.

One limit worth stating plainly: withdrawing consent stops further collection but does not delete cookies these vendors have already set. Keel cannot reliably remove another party’s cookies, so clearing them in your browser settings is the only complete removal.

Strictly necessary

These are required for the site and app to work, so they are always on and are not used for advertising.

• keel_consent (set separately on keelgrc.com and on app.keelgrc.com): stores your cookie choices so we can honor them. Each host keeps its own copy, so a choice made on one does not apply to the other. Expires after 180 days.
• keel-theme (browser localStorage, not a cookie): remembers your light or dark theme. Persists until you clear it.
• Clerk session (__session, __client_uat and related, on app.keelgrc.com): keep you signed in to the product. Session and short-lived cookies.
• keel_active_org (app.keelgrc.com): remembers which workspace you are working in. Functional, session length.
• keel_setup_dismissed (app.keelgrc.com): remembers that you dismissed the onboarding checklist. Expires after 180 days.
• Cloudflare Turnstile / bot management (e.g. __cf_bm): protects our forms and infrastructure from abuse. Short-lived, security purpose.

Analytics (opt-in)

These help us understand how this marketing site is used so we can improve it. They load only after you accept the analytics category, and every one of them is limited to keelgrc.com - none runs in the signed-in app. We do not sell this data.

• Google Analytics 4 (_ga, _ga_*): aggregate traffic and engagement measurement. Expires after up to 2 years. We enable IP anonymization.
• Microsoft Clarity (_clck, _clsk): usage analytics and session recording, on this marketing site only - not in the signed-in app. Clarity records your browsing session here and replays it to us: the pages you view, pointer movement, scrolling and clicks, and the page as it appeared. Form-field values, and text containing a digit or an “@”, are redacted; the URL of each page you visit is recorded. _clck lasts about 1 year; _clsk is short-lived. Clarity is also configured to read two Microsoft Advertising cookies - _uetmsclkid and _uetvid - if they are already present in your browser, and to send their values with the session. Clarity does not set those two and does not load Microsoft Advertising’s tag; they exist only if a Microsoft Advertising tag has set them, so we state no lifetime for them.
• Metricool (tracker.metricool.com): traffic and marketing-performance measurement on this marketing site only. It is not used in the signed-in app.

There is no analytics entry for the app, because the app currently runs no analytics tool. Keel used a product-analytics tool in the signed-in app until August 2026. It was removed and nothing replaced it, so no such cookie is set any more; a copy already in your browser from before then is inert and can be cleared in your browser settings. The app’s analytics category remains in place and gates nothing today - if we add a tool we will list it here, and it will not load until you accept that category.

Marketing (opt-in)

These help us measure and improve our advertising. They load only after you accept the marketing category.

• Meta (Facebook) Pixel (_fbp): measures the effectiveness of our advertising. Expires after about 90 days.
• keel_utm (keelgrc.com): stores the first campaign that referred you (the utm_* parameters) so we can attribute an enquiry to it. Expires after 90 days.

Third-party cookies

The analytics and marketing tools above are provided by Google, Microsoft, Meta and Metricool, who act as third parties and set their own cookies once enabled on this marketing site. Their use of data is governed by their own privacy policies. The providers we rely on to run Keel are listed on our sub-processors page.

Changes

As our tools change we will update this page and, where the categories change, ask for your consent again. Questions? Email privacy@keelgrc.com.