Privacy, cookies and the scripts on this page
I run this guide and I am the controller for it. First-party storage includes the consent record, a sponsored-bar dismissal record, and cookies written by the analytics providers. The analytics, session-replay and advertising data described below goes to Google, Microsoft and Adsterra under their own terms. I use the reports to see which pages answer a question and which need a rewrite; I do not build profiles of individual readers or sell data.
What loads, and when
On arrival, before you click anything, the page creates three third-party scripts: Google Analytics 4 (measurement ID G-0MZ4LC628H), Microsoft Clarity (project z53oxbvifl) and Adsterra (publisher 3403020, website 6159106, units NativeBanner_1 31978979 and SocialBar_1 31978980). The consent banner is notice plus a withdrawal control, not a gate. Accept keeps them on; Reject writes the denial to localStorage for 180 days and reloads the page without loading GA4, Clarity or Adsterra.
Global Privacy Control is honoured as a rejection even without a click. Using the Cookie settings button in the footer lets you change the choice. If you reject, the page signals denied consent, unloads the active document and reloads with all three providers disabled. Requests sent before you rejected cannot be recalled. Global Privacy Control also prevents these tags loading.
YouTube is different: a trailer is a click-to-play facade. No YouTube iframe or YouTube cookie is created until you press the play button.
These providers can load their own delivery hosts. In the local build audit on 29 October 2026, GA4 requested www.googletagmanager.com and www.google-analytics.com; Clarity requested www.clarity.ms, scripts.clarity.ms and regional collection hosts under *.clarity.ms. Adsterra requested bicea.org, static.nresystems.com, cdn.storageimagedisplay.com, cdn.show-sb.com, cdn.show-creative1.com and cdn.cloudpiko.com. All of these analytics and advertising requests start by default and stop on the reloaded page after Reject. Delivery hosts can rotate with a creative. YouTube player requests remain click-triggered; fonts and poster images are served locally.
Google Analytics 4
Google Analytics 4 (GA4) is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. It records the page URL, referrer, approximate location derived from IP, device and browser details, and interactions such as scrolling and outbound clicks. IP addresses are not logged by GA4. Reports are aggregated.
GA4 sets the first-party cookies _ga (distinguishes browsers, up to 2 years) and _ga_0MZ4LC628H (keeps the session state for this measurement ID, up to 2 years). This audit did not establish a separate _gid cookie, so it is not listed as storage used by this GA4 integration. The consent record drives Google consent mode: analytics_storage is granted by default and becomes denied after Reject; ad_storage, ad_user_data and ad_personalization are denied unless you press Accept.
The site starts aggregate measurement by default and provides Reject as an opt-out. The configured server-side GA4 retention setting was not independently confirmed in this audit; no specific retention period is claimed here. Google's privacy policy is at policies.google.com/privacy and its opt-out browser add-on is at tools.google.com/dlpage/gaoptout.
Microsoft Clarity
Microsoft Clarity is provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. It records heatmaps, scroll depth and session replays of clicks and page views. Clarity masks text typed into form fields and, by default, does not capture passwords or payment data. The replay is linked to a random identifier, not to your name.
Microsoft documents _clck (site user ID), _clsk (session stitching), MUID (Microsoft browser ID), ANONCHK (advertising ID transfer check), CLID (first-seen marker), MR (MUID refresh check) and SM (cross-domain synchronization). Some are third-party cookies and may be blocked by your browser. Their actual lifetime depends on the provider and browser; no project-specific lifetime was independently established here. The tag is https://www.clarity.ms/tag/z53oxbvifl and reports go to *.clarity.ms.
Clarity starts by default. Reject records the denial and reloads without the tag. Microsoft's privacy statement is at privacy.microsoft.com/privacystatement. The Clarity opt-out is the Reject button here or Global Privacy Control. A Do Not Track header is not currently implemented as a site control. The project-specific server-side retention setting was not independently confirmed; Microsoft describes its retention practices in the linked statement.
Adsterra advertising
Adsterra is provided by Adsterra Network (Advance Group Ltd). This site runs two page-level formats: Native Banner (unit 31978979, script https://bicea.org/21/6da32a93ab49915e309f089f678b58de) and Social Bar (unit 31978980, script https://bicea.org/14/99f2474af76bb28fb3d90f543243033c). Adult ads are switched off for this website (adult: false). There is no Popunder, Banner or Smartlink unit here.
Adsterra, its ad-serving domain bicea.org and the delivery hosts listed above may set cookies and localStorage entries for frequency capping, fraud prevention, geographic targeting and measuring an impression. The network chooses those names, so they are not fixed by this site; you can inspect them under the bicea.org and adsterra.com origins in your browser's storage panel. The Native Banner is an in-flow slot; the Social Bar is the fixed card at the bottom-right, with a local close button that stores d2s_adsterra_social_closed for 180 days and reloads the page without the Social Bar while that record is fresh; the Native Banner can still load.
Advertising starts by default; Reject records denial for 180 days and reloads without either unit or its delivery hosts. Personalized-ad controls: Google Ads Settings, the Digital Advertising Alliance optout.aboutads.info, the Network Advertising Initiative optout.networkadvertising.org and the European Interactive Digital Advertising Alliance youronlinechoices.eu. Adsterra's own privacy policy is at adsterra.com/privacy-policy. Because the site is aimed at a general audience, no interest category based on sensitive data is requested.
YouTube trailers
Some pages show a trailer facade. Pressing play creates an iframe on https://www.youtube-nocookie.com/embed/; until then no request goes to YouTube. Once the player starts, Google receives your IP address and player/referrer information, and may use player storage. The privacy-enhanced player does not use that embedded view to personalize your subsequent YouTube browsing. This audit did not establish a fixed cookie-name or retention list for the clicked player, so it does not promise one. Legal basis: your action in starting the video (consent) and Google's own terms. Google's privacy policy is at policies.google.com/privacy.
Everything stored, key by key
The table lists the storage this site and the scripts it loads can create. First-party keys are written by this origin; the network cookie names are the documented defaults and can change when a provider updates its tag. Retention is the maximum lifetime in the browser, not a promise that a provider keeps server-side records that long.
| Key | Where | Purpose | Retention |
|---|---|---|---|
| d2s_consent | localStorage (this origin) | Records Accept, Reject or Global Privacy Control | 180 days |
| d2s_adsterra_social_closed | localStorage (this origin) | Remembers that the Social Bar was closed | 180 days |
| _ga | Cookie (this origin) | GA4 browser identifier | up to 2 years |
| _ga_0MZ4LC628H | Cookie (this origin) | GA4 session state for this measurement ID | up to 2 years |
| _clck | Cookie (this origin) | Clarity user identifier | Provider/browser controlled |
| _clsk | Cookie (this origin) | Clarity session stitching | Provider/browser controlled |
| MUID / ANONCHK / CLID / MR / SM | Microsoft third-party cookies | Provider-documented identity and synchronization checks; browser may block them | Not independently established |
| Adsterra cookies and storage | bicea.org and the advertising delivery hosts listed above | Frequency cap, fraud prevention, geo targeting, impression measurement | Provider-controlled; not independently established |
| YouTube player storage | youtube-nocookie.com / Google player hosts | Only after play; exact keys depend on player/browser | Not independently established |
Your choices and rights
Reject in the banner, or Cookie settings in the footer, is the fastest way to withdraw. It records denial for 180 days and reloads without the analytics or advertising scripts. Clearing localStorage for d2survivors.net also removes the record, after which the next visit starts from the default-on state and shows the banner again.
You can ask what personal data is processed, request access, correction or erasure, object to processing based on legitimate interest, or complain to your local data-protection authority. Write to [email protected] with the page URL and the request. Because I do not hold a server-side copy of analytics or ad data, requests about Google, Microsoft or Adsterra records may need to go to those companies as well; I will tell you which one applies.
This policy is reviewed when a script, a provider or a retention setting changes. The checked date at the top of the page is the version date. The footer link is the notice.
Questions and answers
Do the analytics and ad scripts wait for me to press Accept?
No. Google Analytics 4, Microsoft Clarity and Adsterra load on the first view. The banner is notice plus a withdrawal control: Reject turns those scripts off and stores the denial for 180 days.
Do you sell personal data?
No. There is no account and no data-broker feed. The site uses aggregate analytics and network advertising; it does not sell a list of readers.
How do I stop the bottom bar coming back?
Press the Close sponsored bar button. That writes d2s_adsterra_social_closed to localStorage for 180 days and stops the Social Bar from loading on this and later pages while the record lasts. Reject also removes it.
Are adult ads enabled?
No. The Adsterra website is recorded with adult ads off, and the site runs only Native Banner and Social Bar units — no Popunder, Banner or Smartlink.
Sources checked 2026-10-29
- Contact — privacy requests (checked 2026-10-29)
- Google privacy policy — GA4 and YouTube (checked 2026-10-29)
- Google Analytics cookie documentation — provider single source: default GA4 cookies and lifetimes (checked 2026-10-29)
- Clarity cookie documentation — provider single source: documented cookie names (checked 2026-10-29)
- YouTube privacy-enhanced embedding — provider single source: nocookie player behavior (checked 2026-10-29)
- Microsoft privacy statement — Clarity (checked 2026-10-29)
- Adsterra privacy policy — advertising (checked 2026-10-29)