Cookie Policy

Effective October 27, 2026

This policy explains how Grantlas (grantlas.com), operated by Product Tools LLC, uses cookies and similar technologies. A cookie is a small piece of data a website stores in your browser so it can recognize your session and remember your choices. It should be read alongside our Privacy Policy.

How we use cookies

Grantlas is a paid tool with no advertising. We use the cookies needed to run the service, a small number that help us understand how people find Grantlas, and nothing else.

Strictly necessary cookies

These are required for Grantlas to work and cannot be turned off within the app. They include:

  • Sign-in session. After you sign in, a session cookie keeps you signed in so you don’t have to re-authenticate on every page.
  • Onboarding draft. A short-lived cookie holds the draft organization profile we build for you between the two onboarding steps.
  • Search handoff. A short-lived cookie passes your natural-language search from one page to the results page.
  • Selected organization. If your plan covers more than one organization, a cookie remembers which one you are currently working in, so the app shows you the right data as you move between pages.
  • Security. Our infrastructure and security providers may set essential cookies to protect the service against malicious traffic.

Functional cookies

These are set by Grantlas itself and are never shared with anyone else:

  • First visit (gl_attr, 90 days). Remembers how you first found Grantlas — the page you arrived on, the site that referred you, and any campaign details in the link — so that if you create an account we can understand which channels work. It is written on our public pages and read once, when you sign up.
  • Analytics choice (gl_analytics_optout, 1 year). Set only if you turn analytics off below, so we remember that choice in this browser.
  • Affiliate invite (gl_referral_banner, first-party, about 60 days). Set when you open a Grantlas affiliate’s invite link. It holds the affiliate’s code and the name they chose, and whether you hid the reminder, so we can show you a reminder of the discount on later visits and apply the discount at checkout. If you sign up, we save the code on your account. It is set whatever your analytics choice, because it is never shared with anyone, and it is cleared once you subscribe.

Analytics cookies

On our public marketing pages, blog, and these policy pages — not inside the signed-in app — we use Google Analytics to measure which pages and sources lead people to sign up. Google Analytics sets _ga and _ga_<ID>, which last up to 2 years. We have turned off Google signals and ad personalization, we do not use analytics for advertising, Google may not use this data for its own advertising, and Google deletes it after 14 months.

If you create an account, our server also tells Google that a signup, trial, or payment happened, tied to the same pseudonymous identifier and never to your name, email address, or organization. Our Privacy Policy explains that in full.

You can turn analytics off in any of these ways:

  • Use the switch below. It applies to this browser.
  • Use a browser or extension that sends the Global Privacy Control (GPC) signal. We treat it as an opt-out, and Google Analytics does not load.
  • Install Google’s Google Analytics opt-out browser add-on.

Each of these applies to the browser you are using, so you would need to repeat it on another device. Opting out stops further measurement rather than deleting what was already collected; if you want that removed too, email us.

Affiliate referral cookie

If you arrive through a link shared by a Grantlas affiliate, PromoteKit, the service that runs our affiliate program, sets promotekit_referral on grantlas.com for the program’s referral window (at least 60 days) and records the visit. If you sign up, we save that referral on your account and pass it to Stripe at checkout, so the affiliate who sent you is credited. That affiliate doesn’t see your email address, and PromoteKit states that it does not sell or share personal information. It is covered by the same choices as analytics: with analytics turned off or the GPC signal on, PromoteKit’s script does not load. You still get the discount through our own gl_referral_banner cookie (above), but the affiliate isn’t credited.

Analytics preferences

Analytics are on for this browser.

Preferences

We remember your light/dark theme choice using your browser’s local storage (not a cookie). It stays on your device, is never sent to us, and simply keeps the app in the appearance you picked.

What we don’t use

Grantlas does not use advertising cookies, and we do not track you across other sites for advertising. The only marketing-related cookies are the affiliate cookies described above. We do not sell your information, and we do not share it for cross-context behavioral advertising.

Managing cookies

You can control or delete cookies through your browser settings, and clear local storage the same way. Because our sign-in and core features depend on the strictly necessary cookies above, blocking them will prevent you from signing in and using Grantlas. Blocking analytics or functional cookies does not affect how Grantlas works.

Changes to this policy

We may update this policy from time to time and will post the revised version here with a new effective date.

Contact

Product Tools LLC — team@grantlas.com