Cookie Policy
Effective: 6 August 2026. Version: 1.1.
This policy explains the cookies and similar technologies used on
enablegrc.ai. It sits alongside our Privacy Notice.
1. Plain-English summary
We use a small number of strictly necessary cookies to make the site work and to remember your cookie choice. Everything else is off until you opt in. With your consent, we also use:
- Functional cookies — for the HubSpot meetings/booking widget, if you choose to open it.
- Marketing cookies — the LinkedIn Insight Tag and HubSpot, which help us understand interest in our product and measure our campaigns. These do set advertising and cross-site cookies.
You don’t need to accept anything to read our pages. On your first visit a banner lets you Accept all, choose Necessary only, or Customise which categories to allow. You can change or withdraw your choice at any time via “Cookie preferences” in the footer. If your browser sends a “Do Not Track” signal, optional cookies stay off unless you turn them on.
2. What is a cookie?
A cookie is a small text file placed on your device by a website you visit. Cookies typically store settings (e.g. your preference for dark mode), session state (e.g. “you’re logged in”), or analytics data. Similar technologies (localStorage, sessionStorage, pixels) work in related ways.
3. Cookies we use
3.1 Strictly necessary (always on)
Required for the site to function. No consent required under GDPR.
| Name | Purpose | Duration | Source |
|---|---|---|---|
egrc_consent |
Remembers your cookie choices (which categories you allowed) | 12 months | EnableGRC (first-party) |
cf_clearance |
Cloudflare bot-protection session token | Per visit | Cloudflare |
3.2 Functional — meetings booking (consent-based)
These are set only if you allow Functional cookies and open the HubSpot meetings widget.
| Name | Purpose | Duration | Source |
|---|---|---|---|
__hs_opt_out |
Records whether you’ve opted out of HubSpot tracking | 13 months | HubSpot (third-party) |
hubspotutk |
Identifies a booking session | 13 months | HubSpot (third-party) |
messagesUtk |
Identifies you if you return to complete a booking | 13 months | HubSpot (third-party) |
Consent: these load only if you allow the Functional category in the cookie banner (or “Cookie preferences”). If you decline, the booking widget is not loaded — our Contact page provides an email alternative.
3.3 Analytics
We do not run a separate cookie-based analytics platform. Aggregate insight into how our pages are used comes from the Marketing tools in §3.4 (HubSpot), which load only with your consent. If we later add a cookieless analytics tool, we will update this policy first.
3.4 Marketing (consent-based)
These load only if you allow the Marketing category in the cookie banner. They set advertising and cross-site cookies used to understand interest in EnableGRC and to measure our LinkedIn campaigns.
LinkedIn Insight Tag — LinkedIn Ireland Unlimited Company:
| Name | Purpose | Duration | Source |
|---|---|---|---|
bcookie |
LinkedIn browser identifier used by the Insight Tag | 1 year | LinkedIn (third-party) |
li_sugr |
Browser identifier for measurement and analytics | 90 days | LinkedIn (third-party) |
UserMatchHistory |
LinkedIn Ads identity sync | 30 days | LinkedIn (third-party) |
AnalyticsSyncHistory |
Stores the time of synchronisation with LinkedIn analytics | 30 days | LinkedIn (third-party) |
lidc |
Routing / data-centre selection for LinkedIn | 1 day | LinkedIn (third-party) |
HubSpot — HubSpot, Inc. (product and marketing analytics):
| Name | Purpose | Duration | Source |
|---|---|---|---|
__hstc |
Main HubSpot tracking cookie (visitor, session and timestamps) | 6 months | HubSpot (third-party) |
hubspotutk |
Identifies a visitor across page views and forms | 6 months | HubSpot (third-party) |
__hssc |
Tracks the current session | 30 minutes | HubSpot (third-party) |
__hssrc |
Detects whether the visitor restarted their browser | Session | HubSpot (third-party) |
Consent & withdrawal: allow or decline these in the banner or later via “Cookie preferences”. If you withdraw consent, we stop loading these tools and delete the HubSpot first-party cookies we can reach; some LinkedIn cookies are set on LinkedIn’s own domain and can be removed through your browser’s cookie controls.
4. Managing your cookie preferences
- On this site: you can open the cookie preferences panel at any time by clicking “Cookie preferences” in the footer.
- In your browser: all modern browsers let you block
or delete cookies. See
aboutcookies.orgor your browser’s help for instructions. - Do Not Track: this site respects the DNT browser signal by disabling optional cookies when DNT is set.
Note: blocking strictly-necessary cookies may impair basic site features (e.g. remembering your preferences).
5. Changes
We may update this policy if our cookie usage changes. The effective date is shown at the top.
6. Contact
Questions about this policy:
privacy@enablegrc.ai.