Sign in Get started
Legal

Cookie policy

This page explains the cookies and similar technologies Keel uses, what each one is for, and how to change your choices. It sits alongside our Privacy & Cookies summary. Keel is operated by Keel GRC LLC, Buford, Georgia, USA.

Last updated: July 2026.

Your choices, and how to change them

On our marketing site (keelgrc.com) analytics and marketing cookies are off by default. Nothing in those categories loads until you accept it. When you first visit you will see a banner to accept all, reject all, or choose by category. You can revisit that choice any time from the Cookie preferences link in the footer.

We also honor browser opt-out signals: if your browser sends a Global Privacy Control (GPC) or Do Not Track signal, we leave the optional categories off. You can additionally block or delete cookies in your browser settings; blocking the optional categories does not affect your ability to use the site.

In the Keel app (app.keelgrc.com) we use Microsoft Clarity and Metricool for the same analytics purpose, in addition to the essential sign-in and workspace cookies below. The app asks for your consent before loading them, just like this site, and also honors Global Privacy Control and Do Not Track.

Strictly necessary

These are required for the site and app to work, so they are always on and are not used for advertising.

  • keel_consent (keelgrc.com): stores your cookie choices so we can honor them. Expires after 180 days.
  • keel-theme (browser localStorage, not a cookie): remembers your light or dark theme. Persists until you clear it.
  • Clerk session (__session, __client_uat and related, on app.keelgrc.com): keep you signed in to the product. Session and short-lived cookies.
  • keel_active_org (app.keelgrc.com): remembers which workspace you are working in. Functional, session length.
  • keel_setup_dismissed (app.keelgrc.com): remembers that you dismissed the onboarding checklist. Expires after 180 days.
  • Cloudflare Turnstile / bot management (e.g. __cf_bm): protects our forms and infrastructure from abuse. Short-lived, security purpose.

Analytics (opt-in)

These help us understand how the site is used so we can improve it. They load only after you accept the analytics category. We do not sell this data.

  • Google Analytics 4 (_ga, _ga_*): aggregate traffic and engagement measurement. Expires after up to 2 years. We enable IP anonymization.
  • Microsoft Clarity (_clck, _clsk): aggregate usage and session-quality analytics. _clck lasts about 1 year; _clsk is short-lived.
  • Metricool (tracker.metricool.com): traffic and marketing-performance measurement.

Marketing (opt-in)

These help us measure and improve our advertising. They load only after you accept the marketing category.

  • Meta (Facebook) Pixel (_fbp): measures the effectiveness of our advertising. Expires after about 90 days.
  • keel_utm (keelgrc.com): stores the first campaign that referred you (the utm_* parameters) so we can attribute an enquiry to it. Expires after 90 days.

Third-party cookies

The analytics and marketing tools above are provided by Google, Microsoft, Meta, and Metricool, who act as third parties and set their own cookies once enabled. Their use of data is governed by their own privacy policies. The providers we rely on to run Keel are listed on our sub-processors page.

Changes

As our tools change we will update this page and, where the categories change, ask for your consent again. Questions? Email [email protected].