Privacy policy

Editorial desk · 2026-10-21 · data d2dfaee739

I wrote this policy by reading the scripts this site actually loads, on 21 October 2026, including the two Adsterra units added that day. The operator is the editorial desk behind [email protected]. We do not run accounts, and we do not ask for a game login.

What the page loads

Advertising is served by Adsterra through bicea.org. Two units are configured: Native Banner (unit 31842531) and the fixed Social Bar (unit 31842532). Neither script is in the HTML the server sends. The page creates both only after you press Allow optional storage, so Reject, Global Privacy Control, or leaving the banner unanswered means bicea.org is never contacted. Google Analytics 4 and Microsoft Clarity load on first paint; Reject stops Clarity collection through its consent API. Google Fonts serves the typefaces. No other banner SDK, such as traffic-mesh, is loaded.

Storage on your device

• localStorage key ps_consent_v1 stores your optional-storage choice and a timestamp. We keep that choice for 180 days, then the banner returns and asks again.
• localStorage key ps_floating_ad_closed stores "1" after you close the Adsterra Social Bar, so the fixed strip stays closed on later page views. It is cleared when you allow optional storage again, and it never expires on its own.
• Google Analytics sets the _ga and _ga_* cookies (about 2 years under GA4 defaults). Microsoft Clarity sets _clck (about 1 year) and _clsk (about 1 day). Those lifetimes are controlled by Google and Microsoft.
• Adsterra and the bicea.org script host may set their own cookies and local storage. The responses we observed set Cloudflare’s __cf_bm cookie (about 30 minutes); Adsterra’s ad-frequency and measurement cookies, and their exact lifetimes, are set and named by Adsterra, not by this site.
• We set no other first-party cookies. After a video click, YouTube controls any player storage under its own policy. The game’s own localStorage exists only on pokesurvivor.com; this guide never reads it.

Consent, GPC, ads and opt-out

The Google Consent Mode v2 default is ad_storage, ad_user_data and ad_personalization denied, with ads_data_redaction and url_passthrough set. analytics_storage starts as granted, and the GA4 and Clarity tags use it. If navigator.globalPrivacyControl is true, the page immediately updates the choice to denied, stops Clarity collection and leaves bicea.org unrequested. Reject in the banner keeps advertising signals denied, tears down any ad script this page view created, and stops Clarity collection. Cookie settings in the footer reopens the banner. Adsterra receives the ad request, your IP address, user agent and the page URL only when the units load. We do not pass your email or any account identifier, and this site has no accounts. We do not enable personalized advertising in Adsterra; if a downstream partner personalizes ads in your region, opt out at https://adssettings.google.com/, https://optout.aboutads.info/ or https://www.youronlinechoices.eu/. Adsterra’s own policy is https://adsterra.com/privacy-policy/.

Legal basis, retention, rights

Legal basis: consent (GDPR Article 6(1)(a)) for the Adsterra ad request and for optional Clarity replay; legitimate interests (Article 6(1)(f)) for aggregate GA4 measurement, fraud prevention and server security. Consent is voluntary and can be withdrawn at any time through Cookie settings; withdrawal does not affect processing that happened before it. We keep the consent record in your browser for 180 days and the floating-bar dismissal until you allow optional storage again. Adsterra, Google and Microsoft keep their own logs under their policies and retention periods. You can ask for access, correction, or deletion of mail you sent us at [email protected], or object to processing based on legitimate interests. We will update this notice when the script list changes. Global Privacy Control is honored as a rejection of optional storage; the separate Do Not Track header is not detected by this site.

Google Fonts requests transmit your IP address and browser request headers; blocking fonts.googleapis.com leaves the system-font fallback. Email sent to our domain is forwarded through Cloudflare Email Routing to our editorial inbox.

Hosting and external video

Cloudflare supplies the domain’s DNS, email routing and, on deployment, delivery infrastructure. Infrastructure providers can process connection metadata such as IP addresses for delivery and abuse prevention. Email sent to our domain is forwarded through Cloudflare Email Routing to our editorial inbox; the message and sender address are processed to answer that request. Do not send passwords or account tokens.

A video click is a separate request to load YouTube, even if optional storage was rejected. No YouTube thumbnail, iframe or script is requested before that click. The privacy-enhanced player and its playback telemetry use www.youtube-nocookie.com; channel images use yt3.ggpht.com and streaming uses a changing googlevideo.com CDN hostname. These were observed in the player on 21 October 2026, not advertising or analytics tags installed by this guide. YouTube can process connection and playback data under its own policy. Cookie settings controls this site’s optional-storage signals, not an already loaded third-party player. Reload the page to remove that player.