Version 2026-10-12 · 12 October 2026
Consent is required for storage that is not strictly necessary for a service you asked for. Every cookie below is a session, a security token, or a preference you set yourself by clicking a control. Nothing here profiles you, follows you to another site, or is shared with an advertiser. So there is nothing to ask you to consent to — and a banner that asks anyway is theatre.
| Name | What it does | How long | Necessary? |
|---|---|---|---|
smsgw_portal |
Keeps you signed in to the customer portal. Contains an opaque random identifier — no personal data — and the matching record is held server-side. | 14 days, or until you sign out | Strictly necessary |
smsgw_admin |
Keeps an operator signed in to the administration panel. | 12 hours, or until sign-out | Strictly necessary |
smsgw_csrf |
Prevents another website from submitting forms on your behalf (cross-site request forgery protection). | 30 days | Strictly necessary |
lang |
Remembers whether you chose Danish, English or Ukrainian, so the portal does not reset on every visit. Set only when you click a language. | 1 year | Strictly necessary |
The same duty to tell you applies — it is still storage on your device.
| Name | What it does | How long |
|---|---|---|
smsgw_theme | Remembers whether you chose the light or dark appearance. Stored in your browser only and never sent to us. | Until you clear your browser data |
| Who | Where | What they see |
|---|---|---|
| Contabo GmbH (Germany) | Hosting of the service, its database and our mail server. | Everything the service stores, on servers in the EU. Contabo runs the machines; it has no access to the application. |
| GatewayAPI (Denmark) | Delivery of SMS; numbers and keywords for two-way SMS. | The destination number, the sender and the message text, and messages sent to a number or keyword rented through them. |
| BulkGate (Czech Republic) | Delivery of SMS; replies to its shared reply number. | The destination number, the sender and the message text, and replies sent to that number. |
| Zadarma | Delivery of international SMS and fallback delivery. | The destination number, the sender and the message text. |
| gyk.dk (LynBro ApS, Denmark) | Shortening a link in a message when the network requires it. | The link only — not the recipient or the rest of the text. |
| Cloudflare Turnstile | Bot protection on the sign-in and registration forms. | Chosen specifically because it does not profile visitors and sets no tracking cookies. It sees the request's IP address and a token, nothing about who you are. |
| Stripe | Card payments, when you top up by card. | You are redirected to Stripe's own hosted page. Card details are entered on Stripe's systems and never reach ours — we receive only the outcome and the last four digits. |
| Google (Google Drive) | Off-site copies of our backups, for disaster recovery. | A copy of the database. Stored for a limited number of days and used only to restore the service. |
We use Cloudflare Turnstile rather than reCAPTCHA specifically because Turnstile does not set tracking cookies. reCAPTCHA does, and a bot check that legally requires consent before it can run is not a bot check you can put in front of a sign-in form.
Your browser can block or delete all of them. Blocking
smsgw_portal or smsgw_csrf means you cannot sign in
or submit a form — not because we are punishing you, but because those two
cookies are the sign-in and the form protection.
If we ever add analytics or marketing storage, a consent banner appears in the same change, defaulting to off, and this page says so.
LynBro ApS · CVR 46321499 · Denmark ·
support@jasms.dk
Version 2026-10-12 · last updated 12 October 2026.
English is the governing version of these documents.