Privacy Policy

Who is responsible

The operator of probablystolen.app is the controller for the choice stored in your browser and can be reached at [email protected]. The site is a static guide: it does not run accounts and does not ask you to create one.

What loads on the first view

This build loads three third parties by default, before you touch the banner: Google Analytics 4 (measurement ID G-85Q38ZGPXD), Microsoft Clarity (project ID z56n8fmr6s), and Adsterra (publisher 3403020), which serves a Native Banner in the content column and a Social Bar fixed at the bottom of the viewport. YouTube is an additional service, and it is requested only after you press play on a video.

The Google tag is a normal async script in the HTML; Clarity and both Adsterra placements are created by the site’s own loader on the first page view. That keeps them off the critical path, not off the page: they still run unless you press Reject or your browser sends Global Privacy Control.

The banner provides notice and withdrawal controls. With no stored choice the page loads all of the above; pressing Reject records a refusal for 180 days, removes the Adsterra placements, and tells Clarity to stop recording. Pressing Accept after a rejection restores them. Cookie settings in the footer reopens the banner at any time.

Google Analytics 4

Google Analytics 4 (Google LLC), measurement ID G-85Q38ZGPXD. gtag.js loads from www.googletagmanager.com on content pages and sends measurement to www.google-analytics.com or its regional collection hosts, so Google receives the requested URL, your IP address, user agent, and referrer. Consent Mode v2 defaults run in the page head before the tag is configured: ad_storage, ad_user_data, and ad_personalization start denied, analytics_storage starts granted, and ads_data_redaction plus url_passthrough are on.

By default analytics_storage is granted, so GA4 counts the page view and writes first-party cookies _ga and _ga_85Q38ZGPXD, each kept for up to two years. That is what lets return visits be told apart. Reject updates analytics_storage to denied before a page reload; later page views restore that denial before GA configuration and may send cookieless measurement pings. Purpose: count page views so thin guides can be found and rewritten. Legal basis: our legitimate interest in aggregate traffic measurement. Google Privacy Policy and how Google uses site information.

Microsoft Clarity

Microsoft Clarity (Microsoft Corporation), project ID z56n8fmr6s. The tag at www.clarity.ms/tag/ starts on the first page view and requests code from scripts.clarity.ms and collection endpoints on subdomains of clarity.ms, so Microsoft receives the requested URL, your IP address, user agent, referrer, and the interaction data behind heatmaps and session replays: clicks, taps, scrolls, pointer movement, and page rendering timings. Clarity stores first-party cookies _clck (up to one year) and _clsk (one day) and uses browser storage so the page views of one visit group into one recording. Text typed into form fields and other flagged content is masked by default.

Pressing Reject sends Clarity a denied consent signal, calls its stop API, and reloads this page with Clarity disabled. Withdrawing cookie consent alone can leave cookieless tracking active, so this site also stops the recorder and does not load it on later views while the refusal lasts. Purpose: understand where readers have difficulty using the guide. Contact the operator to object or request deletion. Microsoft Privacy Statement.

Adsterra

Adsterra (Adsterra Network LP), publisher ID 3403020, website ID 6159488. Two placements run, both created by the site loader on the first page view: NativeBanner_1 (ad unit 31981373) in the content column and SocialBar_1 (ad unit 31981374), the strip pinned to the bottom-right corner. Neither script tag is in the HTML we send, so nothing is requested from the ad host until the page’s own script runs. Adult advertising is switched off at the website level, and no popunder, banner, or smartlink format is used.

Once loaded, Adsterra receives your IP address, the page URL, referrer, user agent, and viewport size, and may set cookies on bicea.org or through creative served by its demand partners. First-view browser measurements on 29 October 2026 also observed static.nresystems.com, cdn.storageimagedisplay.com, cdn.show-sb.com, cdn.show-creative1.com, and cdn.cloudpiko.com supplying advertising code or media by default. Creative hosts can change. Reject disables both placements and reloads the page to stop their code and subsequent requests. Adsterra controls the names and retention of its session and frequency-cap cookies; those values have not been independently established here. The Social Bar close control stores ps.adfloat.closed until you clear site data or press Accept.

Pressing Reject removes both placements and reloads the page with their loaders disabled, ending their execution and stopping later page views from creating them. Purpose: pay for the guides. Legal basis: consent, which you can withdraw at any time through Cookie settings. Personalized-ad choices for services you use elsewhere: Google My Ad Center, Digital Advertising Alliance, Network Advertising Initiative, and Your Online Choices. Adsterra Privacy Policy.

YouTube and the rest of the page

A video stays as a locally hosted picture until you press play. Pressing play inserts an iframe to www.youtube-nocookie.com for that video only; YouTube then handles the player under Google’s policy and may receive your IP address, browser information, referrer, and request time, and may set its own cookies. Privacy-enhanced mode is not a promise of no processing. Purpose: show a cited video. Legal basis: your consent, given by pressing play; Reject removes an active player and prevents another load, but cannot recall requests already sent. Google Privacy Policy.

Hosting and contact email run on Cloudflare. Delivery processes request information such as your IP address, requested URL, and browser headers. Contact mail uses Cloudflare Email Routing with a send-to-Worker rule for mail-hub, where the operator reads and answers messages. These are server-side services, not browser scripts. Cloudflare Privacy Policy. Steam links are ordinary outbound links and load nothing until you follow them.

Storage keys and retention

The site writes two localStorage keys of its own. Third parties write the cookies below. There is no server-side profile of you to delete.

Your rights, ads settings, and signals

You can ask what is stored, correct it, or request deletion by emailing [email protected]. You can withdraw consent at any time with Cookie settings in the footer; Reject is the withdraw control and it also stops the Adsterra loader on later page views. If navigator.globalPrivacyControl is true, the site stores a rejection and does not load Clarity or the ad placements. Do Not Track is not a reliable signal in current browsers; Global Privacy Control is the signal this site reads.

Industry-wide interest-based advertising choices are collected at the links above. Those are external preference tools, not additional vendors on this site. This site serves contextual advertising through Adsterra only, with adult advertising switched off, and it does not run Google AdSense. Policy changes are posted on this page with a new checked date.

See also