Cookie policy

Last updated: 9 November 2026

Blast SMS uses a small number of cookies and similar storage, only to make the website work. We don't use advertising or cross-site tracking cookies.

Name	Purpose	Lasts
Session cookie	Keeps you signed in and remembers your session	Until you close the browser, or 2 hours of inactivity
XSRF-TOKEN	Protects forms from cross-site request forgery	Session
remember_web_*	Keeps you signed in if you tick "Remember me"	Up to 400 days, or until you sign out
theme (local storage)	Remembers light or dark mode	Until you clear it

These are strictly necessary, so they don't need consent. You can block or delete cookies in your browser settings, but then you won't be able to sign in.

The mobile app doesn't use cookies. It keeps your sign-in token in your phone's secure storage (Android Keystore or iOS Keychain) until you sign out.

Questions: hi@blastsms.site.