Your data
Privacy policy
Updated 2026-10-17
I wrote this against the scripts that actually ship in the page, not against a template. On 17 October 2026 the first HTML loads Google Analytics 4 with every storage type still denied, and it loads no advertising script: the Adsterra ad units and the Microsoft Clarity session recording are created by JavaScript only after you press Allow, and the ad units are never requested if you reject or simply never answer.
What the site itself stores
Two localStorage keys belong to this site. bs_consent holds your choice (accepted or rejected) and a timestamp, kept for 180 days, after which the banner may ask again. bs_ads_closed is set to 1 when you close the floating ad strip, so it stays closed on later page views instead of only until the next refresh; pressing Allow again clears it. Neither key is a cookie, and this site sets no cookie of its own.
The consent snippet calls gtag("consent","default") with ad_storage, ad_user_data, ad_personalization, and analytics_storage set to denied, before any gtag("config") line, and it turns on ads_data_redaction and url_passthrough. gtag("config","G-ZRFRBXFMSV") then connects Google Analytics 4 to this domain. While the signals stay denied, Google receives cookieless measurement pings instead of storage-backed analytics, and pressing Allow flips all four storage types to granted.
Microsoft Clarity (project yyp4gqbuwi) is a session-replay tool: heat maps and recordings of page interaction. It is not in the served HTML. src/components/Consent.astro creates the tag https://www.clarity.ms/tag/yyp4gqbuwi only after you press Allow and then calls clarity("consentv2", …) with both storage types granted; Reject removes the tag again. Microsoft holds what it collects under the Microsoft privacy statement. Clarity is there to see which guides people actually read.
If the browser sends Global Privacy Control (navigator.globalPrivacyControl), the page treats that as rejected: no banner opt-in, no ad script, no replay tag.
Third parties, only after a click
Adsterra serves the two ad units on this site: a Native Banner inside the page body and a floating Social Bar anchored to the bottom of the viewport. Neither invoker script is in the served HTML. src/components/Adsterra.astro creates them only after you press Allow, and both are then requested from the Adsterra script host bicea.org. Rejecting, never answering, or turning the choice off in Cookie settings removes them again. When they do load, Adsterra receives your IP address, browser details, the page URL, and your interaction with the unit, and it can set its own storage for frequency capping and, where personalised advertising is allowed, for interest-based ads. Its handling is described in the Adsterra privacy policy linked below. Adsterra is the only advertising network here: no AdSense tag and no second banner network ships on these pages.
Video placeholders use a locally hosted BloxStrike promotional image, not a YouTube thumbnail request. Pressing Play creates a player at www.youtube-nocookie.com. Google/YouTube then receives your IP address, browser details, page origin, and player interactions, and may use browser storage. The 16 October 2026 player-load check observed www.youtube-nocookie.com, i.ytimg.com, yt3.ggpht.com, www.google.com, www.gstatic.com, fonts.gstatic.com, and jnn-pa.googleapis.com. Actual video playback can add Google/YouTube media requests. Clicking Play requests that external service independently of the site analytics choice. Microsoft Clarity, described above, is the one session-replay and heat-map tool on this site.
Outbound links to Roblox, Discord, X, Steam, or a cited guide leave this site and use those services’ policies. The site’s own fonts and guide images are hosted on this domain. A loaded YouTube player uses its own remote fonts and resources, as listed above.
Server logs, retention, and ads
The host that serves these static files may keep ordinary request logs (IP address, user agent, URL, time) for security. Apart from Google Analytics 4, Microsoft Clarity, and Adsterra, all named above, I do not add a tracker on top of those logs, and I do not sell personal data. The one advertising seller in use is declared in /ads.txt as adsterra.com, 3403020, DIRECT: that id is the publisher id the Adsterra publisher dashboard reports for this account, read from the dashboard rather than guessed. No other seller line is published, because no other network sells inventory on this domain.
Personalized-ad controls, for Adsterra and for accounts you already have: https://adssettings.google.com/ , https://www.youronlinechoices.com/ , and https://optout.networkadvertising.org/ . Do Not Track is not a reliable signal in every browser; GPC is the signal this site honors today.
Legal basis, rights, and changes
The consent choice is stored so the site can respect it (consent), which is also the basis for the ad units and the replay tag: neither runs until you allow it. Logs, if the host keeps them, are for keeping the site up (legitimate interest). You can email [email protected] to ask what this site holds about you, to correct a page, or to object. You can also clear bs_consent and bs_ads_closed in your browser yourself. There is no account to delete on this domain.
Changes show up on this page with a new updated date, the same date used in the page metadata. Cookie settings in the footer reopens the banner.
FAQ
Do you use cookies for ads?
No ad script is in the initial HTML. The Adsterra units are requested only after you press Allow, and Reject leaves them unrequested; Adsterra can set its own storage once it loads. YouTube may set a cookie only after you press play on a video.
How do I change my mind?
Use Cookie settings in the footer, or delete the localStorage keys bs_consent and bs_ads_closed. Rejecting removes the Adsterra scripts and the Clarity tag from the page you are on.
Who do I email?
[email protected]. Cloudflare Email Routing forwards this brand-domain address to the publisher’s inbox.