Cookie policy
- EFFECTIVE
- · 18 OCT 2026
- LAST UPDATED
- · 06 NOV 2026
This covers knowwhocrm.com and app.knowwhocrm.com, both run by Khiliad Limited. Our privacy policy covers everything else we do with personal data.
The short version
In the KnowWho app at app.knowwhocrm.com, and whenever your assistant uses KnowWho, we use cookies to sign you in and to keep the service working. That is all. No analytics, no tracking, no advertising.
On our website at knowwhocrm.com, we use the same sign-in cookies, and analytics only if you say yes. Analytics tells us how people find the website and which pages they read. We ask the first time you visit. Nothing is loaded until you answer, and saying no takes one click, the same as saying yes.
No advertising anywhere. Nothing that follows you to another website, and nothing shared with anyone for marketing.
What a cookie is
A small file a website stores on your device, so it can remember something like the fact that you are signed in. Other technologies do a similar job, including your browser's local and session storage, and this page covers those too.
What we always set
All of these are strictly necessary, which means the service does not work without them, or they remember a choice you made. UK law allows both without asking.
| Cookie | What it does | Who sets it | How long |
|---|---|---|---|
__session, __session_… | Holds your signed-in session | Clerk | About a year |
__client, __client_uat, __client_uat_… | Tells the app whether you are signed in, so it knows which screen to show | Clerk | About a year |
__refresh_… | Renews your session so you are not signed out mid-sentence | Clerk | About a year |
clerk_active_context | Remembers which organisation you are working in | Clerk | Until you close the browser |
__cf_bm | Tells automated traffic from real people, on our sign-in service | Cloudflare | 30 minutes |
_cfuvid | Applies rate limits fairly on our sign-in service, so one client cannot swamp it | Cloudflare | Until you close the browser |
knowwho-analytics-consent | Remembers your answer about analytics, so we do not ask on every page. Website only. | Us | 6 months, then we ask again |
The sign-in cookies appear on knowwhocrm.com and on app.knowwhocrm.com, because you can create an account and sign in on both. Clerk may also set short-lived cookies of its own for a moment while it carries your sign-in from one of our sites to the other. Your answer about analytics is kept on knowwhocrm.com only, and the app never reads it.
| Browser storage | What it does | Who sets it | How long |
|---|---|---|---|
knowwho.connect.assistant (session storage) | Remembers which assistant you picked on the Connect page, so the right steps stay open | Us | Until you close the tab |
Stripe sets its own cookies during checkout, on Stripe's pages rather than ours.
If you block these in your browser, you will not be able to sign in.
Analytics on the website, only if you say yes
These are set only after you click Accept analytics, and only on knowwhocrm.com. The app at app.knowwhocrm.com never sets them, and neither does the KnowWho connector your assistant uses. We also never run analytics on the page where you accept an invitation to a workspace, because its address carries your invitation.
| Cookie or storage | What it does | Who sets it | How long |
|---|---|---|---|
_ga, _ga_… | Tells Google Analytics that two visits came from the same browser, using a random number | Google, on our website | 2 years from your last visit |
ph_…_posthog (local storage and session storage) | Tells PostHog that two visits came from the same browser, using a random number, and keeps track of the current visit | PostHog, on our website | Local storage: until you say no or clear your browser. Session storage: until you close the tab |
__ph_opt_in_out_… (local storage) | Remembers that you said no, so PostHog stays off | PostHog, on our website | Until you clear your browser |
What they record. The pages you visit on our website, the site you came from, what you click and how far you scroll, and the kind of device and browser you use. We also count two moments that matter to us: a click on a Start free button, and finishing sign-up. Neither tool sees your KnowWho account, your book, or what you type into a form.
Your IP address. Both work out roughly where you are, such as your country and city, from your IP address. Google does not keep the address. PostHog keeps it with the visit.
How long they keep it. Google keeps the detail of each visit for 2 months and PostHog for 1 year. After that only totals remain, with nothing about you in them.
Who they are. Google Analytics is run by Google and PostHog by PostHog. Both are named in our privacy policy, with where they keep data. We use neither for advertising: Google's advertising features are switched off, and we do not share what they record with anyone else.
Changing your mind
Cookie settings, at the bottom of every page on the website, brings the question back. If you say no after saying yes, we delete the Google Analytics cookies and PostHog's random number from your browser, and neither sends anything more.
Your answer lasts 6 months. After that we ask again.
What we do not set
- Advertising or retargeting cookies
- Session recording or heatmap tools
- Social media pixels
- Anything that identifies you across other websites
- Any analytics in the app, or when your assistant uses KnowWho
If that ever changes
If we add anything else optional, we will ask you first in the same way, and update this page before we turn it on, not after.
Changes
We will update this page when what we use changes. The date at the top tells you which version you are reading.
Contact
Khiliad Limited, 86-90 Paul Street, London EC2A 4NE. Registered with the Information Commissioner's Office under reference ZB500202.