Privacy policy
This policy describes the scripts that actually run on hamburgerhill.xyz in the 2026-10-29 build. Google Analytics 4, Microsoft Clarity and Adsterra are requested on the first page view, without waiting for a click. The YouTube player is the exception: it waits for a play click on its poster. The cookie banner is notice plus withdrawal, not a gate: choosing Reject stops the optional analytics and ads and stores that refusal for 180 days. It never blocks the page.
Cookies, localStorage and retention
| Key | Where | Set by | Purpose | Retention |
|---|---|---|---|---|
| hh.consent | localStorage | This site | Remembers granted or denied, with an expiry and a version number | 180 days, then treated as missing |
| _ga | Cookie | Google Analytics 4 | Distinguishes browsers for aggregate measurement | 2 years |
| _ga_NHEF4D6X7X | Cookie | Google Analytics 4 | Keeps session state for measurement stream G-NHEF4D6X7X | 2 years |
| _clck | Cookie | Microsoft Clarity | Persists the Clarity user id across visits | Vendor-dependent; expiry not verified |
| _clsk | Cookie | Microsoft Clarity | Joins page views into one session recording | Vendor-dependent; expiry not verified |
| CLID | Cookie | Microsoft Clarity | Identifies the first time Clarity saw this browser across sites | Vendor-dependent; expiry not verified |
| MUID | Cookie | Microsoft | Microsoft identity cookie used by Clarity | Vendor-dependent; expiry not verified |
| hh.socialbar.closed | localStorage | This site | Remembers a click on Hide ad bar; does not change the consent choice | Until site data is cleared |
| sb_main_<hash>, sb_count_<hash>, vrk… and dom… | Cookie | Observed advertising delivery | Delivery identifiers observed in the local browser check; exact suffixes vary | Expiry not independently verified |
| Adsterra and demand-partner cookies | Cookie | Adsterra and its advertising partners | Frequency capping, fraud prevention and personalized advertising; the exact names are issued per creative and partner | Vendor-dependent; no single duration verified |
The hh.consent record looks like a small JSON object: choice, exp and v. It lives in your browser and is readable only by this origin. The site does not run a second banner library and does not write an advertising cookie itself. GA4 and Clarity may set first-party cookies on this site as well as vendor-domain cookies. Advertising identifiers and their duration depend on the delivered creative and browser settings; we have not verified a universal advertising cookie list or lifetime.
Third parties that load on this site
- Google Analytics 4 (Google LLC), property 561442221, web stream 16226574920, measurement id G-NHEF4D6X7X. It loads from googletagmanager.com on every page view and reports to google-analytics.com. Cookies: _ga and _ga_NHEF4D6X7X. Purpose: aggregate page views, referrers and engagement. Property-level event-data retention has not been independently read back; the _ga cookies live up to 2 years. Legal basis: our legitimate interest in measuring the guide, and consent where local law requires it. Opt out with the Google Analytics opt-out browser add-on or Google ad settings.
- Microsoft Clarity (Microsoft Corporation), project z568vp0tn7. It loads from clarity.ms and scripts.clarity.ms, records heatmaps and session replays, and reports to *.clarity.ms. Cookies: _clck, _clsk, CLID and MUID. Purpose: see which sections are read and where the layout fails. Clarity controls recording and aggregate retention under its current terms; we have not independently read back project-specific retention settings. Clarity masks form inputs and sensitive text by default. Legal basis: our legitimate interest in improving the guide, and consent where local law requires it. Controls: the Microsoft privacy dashboard.
- Adsterra (Adsterra Network), publisher id 3403020, website id 6159424. Two units load from bicea.org: Native Banner unit 31981061 (NativeBanner_1) inside the page, and Social Bar unit 31981062 (SocialBar_1) as a floating unit. The 2026-10-29 browser check also observed these Adsterra delivery dependencies: static.nresystems.com, cdn.storageimagedisplay.com, cdn.show-creative1.com, cdn.show-sb.com and cdn.cloudpiko.com. They are requested by the ad loaders by default, not only after Accept; Reject stops the loaders on this site. Creative delivery hosts can rotate. Adult ads are disabled in our publisher settings. Adsterra and its demand partners may set cookies to cap frequency, prevent fraud and personalize creatives; the names are issued per creative and partner. Purpose: fund the site. Advertising cookie names and retention vary by delivery partner; we do not claim a verified universal duration. Legal basis: our legitimate interest in advertising revenue, and consent where local law requires it. Opt out through Your Online Choices, the NAI opt-out, or the DAA opt-out page; the banner Reject button stops both units on this site.
- YouTube (Google LLC) through youtube-nocookie.com. The player is not requested until you press play on a video facade. Once it starts, Google may set its own cookies and receive the video id and your IP address. Purpose: play the clip. Retention: according to Google’s cookie terms. Legal basis: your play click, plus consent where local law requires it.
- The directly integrated services are those listed above; advertising partners can request the delivery dependencies listed with Adsterra. Fonts, screenshots, the logo and the trailer poster are files on hamburgerhill.xyz. Outbound links to itch.io, Wikipedia, YouTube watch pages and stores are ordinary links; they do not load anything until you follow them. There is no traffic-mesh banner SDK, no AdSense, no Popunder and no Smartlink on this site.
Default loading and how Reject works
The Google consent default is set before config: ad_storage, ad_user_data and ad_personalization are denied, analytics_storage is granted, and ads_data_redaction is enabled. Separately, a visitor with no stored choice is treated as granted by our advertising and recording loaders; that default is not saved as an explicit acceptance. On that first view the page requests GA4, Clarity and both Adsterra units immediately, then shows the banner so the choice is visible and reversible. The banner has Accept and Reject on every page. Reject writes denied to hh.consent for 180 days, sends gtag consent update with ad_storage, ad_user_data, ad_personalization and analytics_storage all denied, asks Clarity to stop, removes the Adsterra units and reloads the page to stop already-running vendor code. The stored refusal prevents the advertising and recording loaders from starting again; the Google tag library may still be fetched with measurement disabled. Accept writes granted and restores the same scripts on that page view. Cookie settings in the footer reopens the banner at any time.
This policy does not gate ads or recordings behind a click. There is no sentence here claiming they wait for one, because they do not. The page loads the listed services by default; Reject disables their optional processing for 180 days. This disclosure describes technical behavior, not a guarantee of compliance in every jurisdiction.
Do Not Track and Global Privacy Control
If navigator.globalPrivacyControl is true, or the browser sends Do Not Track, the site writes denied and treats the visitor as having rejected. Accept does not override that signal; the button stores denied instead. A Do Not Track header is not a reliable script signal on its own, but GPC is the signal this banner and both loaders honor before they request anything.
Your requests
Email [email protected] to ask what we hold, to correct a public page, or to object to a line. The site has no account database to export. The consent record lives in your browser; clearing site data for hamburgerhill.xyz deletes it, and Cookie settings lets you replace it. You can also ask us to stop a specific disclosure, and we will answer with what the vendor’s own controls allow. Policy changes are posted on this page with a new updated date; the scripts listed above are the ones that run.
Sources checked 2026-10-29
- Google consent implementation — Consent Mode v2 default and update API; checked 2026-10-29.
- Clarity cookies — Vendor-documented cookie names and lifetimes; checked 2026-10-29.
- Google Analytics privacy — Google’s retention and opt-out terms for GA4.
- Microsoft Clarity privacy — Microsoft’s statement covering Clarity recordings and heatmaps.
- Adsterra privacy policy — The ad network’s cookie, retention and partner terms.
- Your Online Choices — Industry opt-out for personalized advertising in the EU and UK.
- NAI opt-out — US network-advertising opt-out.
- Google ad settings — Google personalized-ad controls.
Questions
Do ads and analytics load before I click Accept?
Yes. Google Analytics 4, Microsoft Clarity and the two Adsterra units are requested on the first page view, before you answer the banner. The banner is notice plus withdrawal: Reject stops them and stores that refusal in hh.consent for 180 days. Accept restores them.
How do I turn the optional scripts off?
Press Reject in the banner, or open Cookie settings in the footer at any time. Reject updates the gtag consent signals to denied, tells Clarity to stop recording, removes the Adsterra Native Banner and Social Bar from the page, and remembers the choice for 180 days. Clearing site data for hamburgerhill.xyz also removes the record, so the next visit starts from the default again.
What is hh.consent?
A localStorage record written by this site only. It holds choice (granted or denied), exp (an epoch timestamp 180 days out) and v (the record version). It is not sent to the mailbox and is not a cookie. Global Privacy Control or Do Not Track forces denied.
Are adult ads shown?
Adult advertising is disabled in the website configuration recorded in our 2026-10-29 integration reference. This describes the publisher setting, not a guarantee about every third-party creative. Only Native Banner (unit 31981061) and Social Bar (unit 31981062) are placed; there is no Popunder, Banner or Smartlink unit on this site.