Cookie Notice
The cookies and browser storage that blast-audit.com and the Blast Audit dashboard use, why, for how long, and how to change your choice.
Last updated: October 5, 2026
This notice lists the cookies and the other browser storage (local storage, session storage) used by the blast-audit.com website and the Blast Audit web dashboard, published by NEXT BP. It explains what each one is for, how long it lasts and whether it needs your consent. How we process the personal data concerned is described in our Privacy Policy.
The Excel add-in runs inside Microsoft Excel and is not covered by this notice.
1. Your choice
When you first visit the website, a banner offers two choices: Essential only or Allow marketing. Both buttons are equally visible, and nothing listed in Section 3 is stored in your browser before you choose. Until you choose, and if you choose Essential only, PostHog measures the audience anonymously, as described in Section 4. You can change your choice at any time from the Cookie settings link at the bottom of every page and in your account menu. If you withdraw your consent, we delete the cookies and browser storage listed in Section 3, and PostHog returns to the anonymous measurement described in Section 4.
Your choice is kept in your browser until you change it or clear your browser storage.
2. Strictly necessary storage (no consent required)
These items are needed to provide the website and the dashboard you use, or to keep them secure. Under Article 82 of the French Data Protection Act, they do not require consent.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
ca_tracking_consent_scope, ca_tracking_consent_choice (local storage) | NEXT BP | Remember your cookie choice | Until you change it |
copilot-dashboard-locale (local storage) | NEXT BP | Remember your language | Until you change it |
sidebar_state (cookie) | NEXT BP | Keep the dashboard side menu open or closed | 7 days |
copilot_audit_redirect, blast-audit.started-trial-end (session storage) | NEXT BP | Return you to the right page after sign-in; show your trial end date before it is confirmed | Until the tab is closed |
blast-audit.support.visitor (local storage) | NEXT BP | Let you reopen a conversation you started in the website chat | Until you clear it; only created when you start a conversation |
blast-audit.support.access (session storage) | NEXT BP | Open a support conversation from the link in an e-mail we sent you | Until the tab is closed |
wos-session (cookie, api.blast-audit.com) | NEXT BP, with WorkOS | Keep you signed in | 30 days, renewed while you use the service |
csrf_token (cookie) | NEXT BP | Protect your account against cross-site request forgery | 7 days, renewed while you use the service |
oauth_binding, oauth_pending, oauth_signup (cookies, api.blast-audit.com) | NEXT BP | Secure the sign-in and sign-up steps | 15 minutes at most |
google_drive_oauth_binding_*, microsoft_files_oauth_binding_*, copilot_365_oauth_binding_* (cookies, api.blast-audit.com) | NEXT BP | Secure the connection of Google Drive or Microsoft 365 | 10 minutes |
Error monitoring. We use Sentry (Functional Software, Inc., data hosted in the European Union) to detect errors on the website and the dashboard. Sentry stores no cookie and nothing in your browser; it receives technical error reports.
3. Analytics and session recording (with your consent)
These items are stored only if you choose Allow marketing. Without that choice, PostHog runs in the restricted mode described in Section 4.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
ph_<project key>_posthog (cookie on .blast-audit.com and local storage) | PostHog (PostHog, Inc., data hosted in the European Union) | Measure how the website and the dashboard are used; recognise a browser across visits; when you are signed in, link the events to your account | Cookie: 1 year; local storage: until you clear it |
__ph_opt_in_out_<project key> (local storage) | PostHog | Remember whether PostHog may collect data | Until you clear it |
ph_<project key>_window_id, ph_<project key>_primary_window_exists (session storage) | PostHog | Group events by browsing session; session recording | Until the tab is closed |
seenSurvey_*, lastSeenSurveyDate (local storage) | PostHog | Avoid showing you the same survey twice | Until you clear it |
Session recording. For visitors who are not signed in and who chose Allow marketing, PostHog records how the pages are used (clicks, scrolling, page changes) so that we can find problems in the website. Text and form entries are masked in the recordings. Recording stops when you sign in.
When you are signed in. If you chose Allow marketing, PostHog links the events to your account (user identifier, e-mail address and organisation). We use them to understand how the product is used, to fix problems and to decide what to improve.
4. Anonymous audience measurement (without consent)
If you choose Essential only, or until you choose, PostHog still counts visits and the use of pages and features on the website and the dashboard, whether you are signed in or not, in a restricted mode: it stores nothing in your browser, does not link the events to you, your account or your organisation, and records no session. To tell visits apart without a browser identifier, PostHog's servers compute a hash of your IP address and browser user agent with a salt that changes every day, so the same browser cannot be recognised from one day to the next. PostHog does not store your IP address with the events.
5. Third-party services you open yourself
- Google Drive file picker. If you open the Google Drive picker from the dashboard, Google loads its own script and frame, which may set Google cookies under Google's privacy policy.
- Payment. Payment and invoices open on Stripe's pages (checkout.stripe.com, billing.stripe.com, invoice.stripe.com). Stripe sets no cookie on blast-audit.com; its own pages use cookies under Stripe's privacy policy.
We do not use advertising cookies, social network trackers or third-party audience measurement other than the services listed above.
6. Managing cookies in your browser
You can also block or delete cookies and browser storage from your browser settings. Blocking the strictly necessary items in Section 2 prevents you from signing in.
7. Contact
For any question about this notice, write to privacy [at] blast-audit.com.