Last updated 7 October 2026
Cookie policy
What mustergrc.ai stores on your device, why, for how long, and how to control it. It covers cookies and similar browser storage, which the law treats the same way.
1. The short version
- MusterGRC's own site sets no cookies.
- Cloudflare's spam check on the contact form sets one strictly necessary cookie, on Cloudflare's own domain.
- The Apollo.io tracker keeps three items in your browser's local storage to recognise the organisation a visit comes from. It never runs for visitors in the EU, the EEA, the UK or Switzerland.
- Our visit statistics use no cookies and no storage.
We do not use advertising cookies, and nothing on the site follows you to other websites.
2. Strictly necessary
Needed for the site to work securely. Under the GDPR and the ePrivacy rules they do not need consent.
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
__cf_bm | Cloudflare (challenges.cloudflare.com) | Part of Turnstile, the contact form's spam check: tells people from automated traffic. Holds no personal profile. | 30 minutes |
cf_clearance | Cloudflare (challenges.cloudflare.com) | Set only if Cloudflare asks you to complete a check, so it doesn't ask again straight away. | Up to 30 minutes |
3. Visitor analytics
Used to understand which organisations take an interest in our work. These run only for visitors outside the EU, the EEA, the UK and Switzerland. The site checks your location with Cloudflare before loading them, and for visitors in those places they never load at all.
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
apolloAnonId | Apollo.io, in local storage | A random ID that lets Apollo connect your visits to this site. | Until you clear it |
…_eventQueue | Apollo.io, in local storage | Holds page visits briefly until they are sent to Apollo. | Until sent |
…_canTrack | Apollo.io, in local storage | Records whether Apollo may track this visit. | Until you clear it |
Apollo identifies the organisation a visit comes from, usually from its network address. In the United States it may also identify individual visitors. See our privacy policy for how we use this information.
4. Cookie-free statistics
We count visits with Cloudflare Web Analytics, which uses no cookies and no browser storage and does not identify you or follow you between sites.
5. Your choices
- Block the Apollo tracker with any ordinary content blocker. The site works normally without it.
- Clear what is stored: in your browser's settings, clear cookies and site data for mustergrc.ai. Apollo's items are removed with the site data.
- Block cookies in your browser's settings. If you block Cloudflare's, the contact form's spam check may not complete, and you can email us at support@mustergrc.ai instead.
6. Changes and contact
We update this page whenever what the site stores changes, and review it at least once a year with our privacy policy. Questions: support@mustergrc.ai.