Privacy Policy

Local choices and vendor cookies

hoh_consent_v1 in localStorage stores granted or denied, a timestamp, an expiry 180 days later and the source of the choice. hoh_socialbar_closed remembers Hide ad bar for 180 days. These records stay in this browser. Clearing the consent record returns the site to default loading and shows the notice again.

Google may use _ga and _ga_D7XZ702WW6 to recognise repeat visits (normally up to two years). Clarity documents _clck (one year) and _clsk (one day), with additional Microsoft cookies on its own domains. These are vendor-documented durations, not guarantees that every browser stores every cookie. Browser restrictions can prevent them.

Adsterra and its creative providers can use third-party identifiers. We have no verified universal list of their cookie names or retention periods and do not estimate one. Reject prevents our loader from starting Google Analytics, Clarity and Adsterra on later page views; it does not erase cookies on other domains or undo requests already sent.

Third parties and when they load

Google Analytics 4, measurement G-D7XZ702WW6: googletagmanager.com supplies gtag.js and google-analytics.com receives measurement. It loads by default. Consent.astro creates the gtag.js script only while the stored choice is granted, so after Reject the reloaded page makes no request to Google for this tag. Requests already sent cannot be recalled.

Microsoft Clarity, project z4af85ra2b: clarity.ms (including www, scripts and regional collection subdomains) provides session replay and heatmaps by default. Microsoft may also use Microsoft-owned domains. Reject disables our Clarity loader and sends its withdrawal signal. Do not send sensitive information through any embedded provider.

Adsterra, publisher 3403020, website 6154916: NativeBanner_1 (31951013) and SocialBar_1 (31951014) load by default from bicea.org. The browser audit also observed creative or support requests to static.nresystems.com, cdn.storageimagedisplay.com, cdn.show-sb.com, cdn.show-creative1.com and cdn.cloudpiko.com. These are Adsterra-served dependencies; the list can vary with the creative. Reject stops both placements. Hide ad bar only hides the Social Bar, not the Native Banner.

itch.io and html-classic.itch.zone host the embedded game only after Play. YouTube video players use youtube-nocookie.com only after a video click; thumbnails are hosted locally. Playing either frame connects to that provider and its dependencies, independently of Accept / Reject.

Fonts, screenshots and video posters are served from this site. Cloudflare handles domain email routing to the mail-hub Worker. Messages sent to [email protected] are stored in the domain mailbox and can be mirrored to the operator’s Gmail for handling and replies. There is no public account system.

Your controls

Accept stores granted and keeps the vendors running. Reject stores denied for 180 days, withdraws the consent signals and reloads the page; the reloaded page creates no Google tag, Clarity tag or ad placement, so none of them is requested. Global Privacy Control or Do Not Track is treated as Reject. Cookie settings in every footer reopens the notice; choosing Accept there can re-enable vendors.

Previously transmitted data cannot be recalled by a browser button. Browser cookie controls and the providers’ privacy controls offer additional choices. Contact the operator at [email protected] about privacy, corrections or deletion requests; include only the information needed to identify your request.

The checked date identifies this policy revision. Vendor choices, retention and handling are also described in the provider policies linked below. We update this page when the implementation changes.

Questions