This page lists every cookie and every piece of browser storage getblast.video uses, who sets it and why (checked in a fresh browser on October 30, 2026). Our Privacy Policy explains your choices and how to opt out.
1. Cookies
For visitors in the EU, the EEA, the UK and Switzerland, the Analytics and Advertising cookies below are set only after "Accept all" in the cookie banner (section 6). The same banner and the same choice apply across the Site, including the invitation builder at /new and the invitation pages.
| Name | Set by | Where | Purpose | Group | Lifetime |
|---|---|---|---|---|---|
blast-consent-region | Blast (our server, from the country our hosting provider reports) | Every page | eu if you are in the EU, the EEA, the UK or Switzerland, otherwise other; decides whether the banner is shown and the tags wait | Needed | 1 day, refreshed on every page |
blast-consent | Blast (the cookie banner) | Set when you choose in the banner | Your choice: accepted or rejected | Needed | 12 months |
blast-consent-ui | The banner library (vanilla-cookieconsent) on our theme, guide and other Next.js pages | Set when you choose in the banner on those pages | The banner's own record of your choice (categories and date) | Needed | 12 months |
_fbp | Meta Pixel (loaded by our own code on the builder, and by Google Tag Manager elsewhere) | Builder, theme pages, guides, home pages, older invitation pages | Tells browsers apart for Meta ad measurement and audiences | Advertising | 90 days |
_gcl_au | Google Ads conversion linker (through Tag Manager, and inline on the home page) | All pages except the builder | Links an ad click to an invitation sent | Advertising | 90 days |
_pin_unauth | Pinterest Tag (through Tag Manager) | All pages except the builder | Pinterest ad-measurement id | Advertising | 1 year |
_ga, _ga_5JTNR921D3 | Google Analytics 4 (through Tag Manager) | Home pages; configured for theme and guide pages | Tells visitors apart for analytics | Analytics | 2 years |
_ga_WM1J8960N1 | Google Analytics 4 (a second property) | Home pages | Tells visitors apart for analytics | Analytics | 2 years |
blast_utm | Blast | Only when the home page is opened from an ad or a tagged link | Carries the campaign tags to the builder; removed when the builder opens | Needed | 30 minutes |
2. Local storage (stays until cleared)
| Key | Set by | Where | What it holds | Group |
|---|---|---|---|---|
blast:flow-id | Blast | Builder, invitation and dashboard pages | A random analytics id for this browser | Analytics |
blast:flow-last-visit | Blast | Same | Campaign tags of your last tagged visit (used for 30 days) | Analytics |
blast:my-invites | Blast | Same | Ids of invitations made in this browser, so your own views are not counted as guest views | Needed |
blast:internal | Blast | Same | A flag for Blast team browsers (?internal=1) | Needed |
blast:rsvp:<invite id> | Blast | Invitation page | Your own reply (name, party size, names, note, email, marketing choice) so you can see or change it | Needed |
blast:codes:<hash> | Blast | Builder send sheet | Timestamps of code requests, to limit how many codes a number can ask for; the key is a hash of the number. Entries written by earlier versions used the number itself and may remain until you clear storage | Needed |
lastExternalReferrer, lastExternalReferrerTime | Meta Pixel | Pages with the pixel | The last outside site you came from, for Meta attribution | Advertising |
mp_<token>_mixpanel, __mpq_<token>_ev | Mixpanel | Theme, guide, home and older pages | A random id, a device id, the first referrer and first landing URL (including campaign tags), queued events | Analytics |
_gcl_ls | Google Ads | All pages except the builder | Conversion-linker state | Advertising |
_pin_unauth_ls | All pages except the builder | A mirror of the Pinterest id | Advertising | |
currentEventId | Blast | Theme pages, older dashboard | The current invitation id | Needed |
hostAccessToken | Blast (an earlier version of the older dashboard page) | Older dashboard | The private dashboard-link token. No longer written since October 31, 2026; may remain on devices that used the earlier version until you clear storage | Needed |
onboardingFormData | Blast (retired onboarding flow) | Devices that used the old flow | The old sign-up form, including email and phone | Needed |
ab_test_*, promoCode | Blast (older pages) | Older pages | Page-variant assignment; a promo code | Analytics / Needed |
IndexedDB firebaseLocalStorageDb | Firebase Authentication (Google) | After you confirm a code | Your signed-in record (phone number and tokens), kept until you sign out, so you can reopen your dashboard for 30 days | Needed |
3. Session storage (cleared when the tab closes)
blast:flow-visit (entry page and campaign tags); attributionData (campaign tags and landing page); is_eu (a region check written by an ad tag); Tag Manager de-duplication flags (begin_onboarding_<id>, phone_signup_<id>, email_signup_<id> and similar); Mixpanel tab ids (mp_tab_id_*, mp_gen_new_tab_id_*); landing_page_session and _lp_tracked_paths (marketing site); and Blast interface state (skipOnboardingStartTracking, categoryPageUrl, categoryPageCategory, showDashboard, previewCloseReload, comingFromFullExperience).
4. Tags and scripts that set no cookie on getblast.video
- TikTok Pixel (through Tag Manager; all pages except the builder, invitation and dashboard pages): reports page views and events to TikTok. No TikTok cookie was observed in our check.
- Meta server-side connection: every pixel event is also sent to a Meta-operated endpoint configured in Meta Events Manager.
- Mixpanel uses local storage, not cookies; Firebase Authentication uses IndexedDB.
- reCAPTCHA Enterprise (send sheet only): Google may set cookies on google.com domains when it loads.
- Google Fonts, Sanity (images) and Vercel (hosting) set no cookies but receive your IP address.
5. Where tags load
- Builder (
/new): Meta Pixel and Mixpanel (for visitors in the EU, the EEA, the UK and Switzerland, only after "Accept all"); Firebase Authentication and reCAPTCHA when you send. - Theme pages, guides, home pages and older invitation pages: Google Tag Manager, which loads Google Analytics, Google Ads, Pinterest, Meta and TikTok; plus Mixpanel. For visitors in the EU, the EEA, the UK and Switzerland, only after "Accept all".
- Invitation pages (
/i/…) and dashboards (/h/…,/host/…): no advertising tags; Mixpanel events with random ids only (for visitors in the EU, the EEA, the UK and Switzerland, only after "Accept all").
6. Consent
Visitors in the EU, the EEA, the UK and Switzerland (identified from the country our hosting provider reports) see a banner on our home pages, theme pages, guides, the invitation builder, invitation pages and older invitation pages before any analytics or advertising tag loads. "Accept all" loads the tags and sets Google's Consent Mode to granted; "Reject non-essential" keeps them off. Nothing but the cookies the Site needs is set until you choose. The choice is kept for 12 months in blast-consent; delete that cookie (or clear the site's cookies) to be asked again. The same banner and the same choice apply across the Site, including the invitation builder at /new and the invitation pages.
Visitors elsewhere see no banner, and every tag listed here loads when the page opens. Section 5 of the Privacy Policy explains how to block cookies in your browser and how to opt out with each provider.