Privacy policy
Updated 2026-10-27. Facts checked 2026-10-27.
This policy matches the code in this release, checked 2026-10-27. It names every third party the pages actually request. Contact [email protected] for privacy requests.
What loads, and when
On a first visit with no saved choice, the page loads these four things immediately: Google Analytics 4 (measurement ID G-JY9YJJ4LY9), Microsoft Clarity (project z4313j1jbr), the Adsterra Native Banner (unit 31944224, NativeBanner_1), and the Adsterra Social Bar (unit 31944225, SocialBar_1). The Clarity and Adsterra tags come from clarity.ms and bicea.org. The initial HTML holds those URLs as strings; the site loader creates the script elements on the first view. The banner is a notice with a way to withdraw, not a gate: it appears after the tags start and the page never waits for Accept.
Observed request hosts in the local build review: Google Analytics uses www.googletagmanager.com and www.google-analytics.com; Microsoft Clarity uses www.clarity.ms, scripts.clarity.ms and rotating letter-prefixed *.clarity.ms collection endpoints. The Adsterra delivery chain requested bicea.org, static.nresystems.com, cdn.storageimagedisplay.com, cdn.show-sb.com, cdn.show-creative1.com and cdn.cloudpiko.com. These are default-loaded requests, not requests delayed until Accept. Ad creatives and regional collection endpoints can change; Reject disables the initiating loaders after reload.
Pressing Reject writes a denied choice, tells the loader to remove the Clarity and Adsterra tags, sets every Google Consent Mode signal to denied (including analytics_storage) and disables Google Analytics for this browser with ga-disable-G-JY9YJJ4LY9, then reloads so the stored refusal is read before a vendor starts. The refusal is remembered for 180 days. Pressing Accept keeps everything on; if the previous choice was Reject, the page reloads and loads the tags again. The footer link Cookie settings reopens the notice so the choice can be changed. If the browser sends Global Privacy Control, the site records denied and does not load Clarity or Adsterra.
This release uses a default-on notice with an opt-out, not prior opt-in. Opening a page can disclose its URL, your IP address, browser information and interactions to the listed providers before you press Accept. Reject prevents future vendor requests after reload; it cannot retract requests already sent. This is a description of the implementation, not a claim that a default-on notice satisfies every jurisdiction’s consent requirements.
Cookies and localStorage keys
| Party | When | Purpose | Keys and lifetime |
|---|---|---|---|
| This site | Every page | Remember the banner choice and keep a closed Social Bar closed | localStorage tmp-consent (choice plus expiry, 180 days) and tmp-social-closed (closed flag plus timestamp, 180 days) |
| Google Analytics 4 | First view, unless Reject or GPC | Aggregate page views and events | May use _ga and _ga_<container> for visitor/session measurement. Vendor retention and account-level event retention are not independently verified by this guide. |
| Microsoft Clarity | First view, unless Reject or GPC | Heatmaps and masked session recordings | May use _clck, _clsk, CLID and MUID; Microsoft may request additional Clarity or Microsoft/Bing hosts. Masking and retention depend on vendor settings; this guide does not certify them. |
| Adsterra Native Banner | First view, unless Reject or GPC | In-feed sponsored content | Campaign-dependent advertising and frequency-cap identifiers. Cookie names and lifetimes have not been established for every creative, so we do not invent a fixed list. Creatives may request further ad delivery hosts. |
| Adsterra Social Bar | First view, unless Reject, GPC or a remembered close | Fixed sponsored bar at the bottom of the viewport | Campaign-dependent identifiers as above. Closing this bar also writes the first-party tmp-social-closed record for 180 days. |
| YouTube (youtube-nocookie.com) | Only when you press Play on a video | Show the embedded playthrough | No request on page view; after play, YouTube may set its own cookies and see your IP |
The two tmp- keys are first-party, never copied to our server, and can be deleted in the browser settings. Adsterra is an independent ad network and acts as a controller for the advertising it serves; its own policy is at adsterra.com/privacy-policy. The Adsterra account for this site has adult advertising switched off, and the site carries no configured popunder, display-banner or smartlink unit. itch.io and Instagram links are ordinary outbound links and receive nothing until followed.
Ads, opt-outs and your rights
The Adsterra placements on this site are a native banner and a social bar; there is no popunder and no adult advertising. You can opt out of personalized advertising at Google Ads Settings, the Digital Advertising Alliance (optout.aboutads.info), or Your Online Choices (youronlinechoices.com). For Google Analytics, the browser add-on at tools.google.com/dlpage/gaoptout blocks measurement on every site that uses it. Microsoft explains Clarity at privacy.microsoft.com/privacystatement.
You can ask what this site holds about you, ask for a copy or deletion, or object to processing by writing to [email protected]. Because the site has no login, we usually hold nothing that identifies you beyond the local keys, correspondence you send us and vendor reports, including Clarity session recordings. You also have the right to complain to your local data protection authority. We answer privacy requests within 30 days.
Retention: tmp-consent and tmp-social-closed expire in the site’s logic after 180 days. Provider-side retention is governed by vendor settings and policies; no account-level retention period is asserted here without verification. Using Reject stops future vendor loads after reload but does not erase data already received by a vendor; use the opt-out links above for that.
Changes, DNT and GPC
This page is edited in the same release as the code, and the updated date above is the date of the policy. If a vendor or key is added or removed, this page changes with it. A browser Do Not Track header is not a reliable signal on its own; Global Privacy Control is the signal this site honors automatically. Older aliases /privacy-policy/, /cookie-policy/ and /cookies/ redirect here.
Published by themasterplan.pro. Editorial standards. Dated source register. Illustrations are original editorial art, not gameplay screenshots.