Privacy, cookies, and what this site loads

Who is responsible

The Tales of Eternia Guide at talesofeternia.org. Contact contact@talesofeternia.org. There is no separate privacy inbox.

What loads before you choose

The HTML, CSS, images, and fonts come from talesofeternia.org. Fonts are files we ship (Source Sans 3 and Cormorant Garamond). They are not a Google Fonts request. Every page loads Google Analytics 4 (measurement ID `G-R3W0XMYKBE`) from googletagmanager.com. Before you choose, an inline script on the page sets Google Consent Mode defaults to denied for ad_storage, ad_user_data, ad_personalization, and analytics_storage, and it sets ads_data_redaction and url_passthrough. With analytics storage denied, gtag.js runs but writes no cookie, no client identifier, and no localStorage key; the only request it may still make is a cookieless, identifier-free ping to google-analytics.com. Nothing about you becomes measurable until you press Accept. There is no AdSense unit in this build. Our only ad partner, Adsterra, is in the build too, but its two scripts are created in the browser only after you press Accept (see Adsterra, after you press Accept), so before that choice no request leaves the page for bicea.org and no ad frame exists. There is no ads.txt file: Adsterra publishes no ads.txt seller record and does not ask publishers for one, and we run no other ad seller, so there is nothing to declare. Microsoft Clarity (project `yz9m35sh00`) is in the build for heatmaps and session replay, but its script tag is created only after you press Accept, so before that choice nothing is requested from clarity.ms. One script is not in our build at all: Cloudflare, our host, injects its Web Analytics beacon (static.cloudflareinsights.com) into the HTML at the edge before the page reaches you, and that injection is not something this page can gate behind the banner. Per Cloudflare's beacon documentation it stores nothing in the browser (no cookie, no localStorage, no IndexedDB), creates no persistent visitor identifier, and only sends timing metrics from the browser performance APIs to /cdn-cgi/rum on this domain, discarding the source IP at the nearest data centre. A content blocker stops it without affecting the site.

Storage on your browser

The banner buttons write that one localStorage key and nothing else. Reject stores the same key with choice set to denied, so we do not ask on every page for 180 days. Accept additionally lets Google Analytics set its own first-party cookies, creates the Clarity script, and injects the two Adsterra ad scripts; until then no _ga, _clck, _clsk, or bicea.org cookie exists and no ad frame is built.

Adsterra, after you press Accept

Adsterra sells the display inventory on this site. Two placements are installed: a native banner inside the article column, above the footer, and a social bar that slides in over the bottom of the screen. Both are in-page formats; there is no popunder, no interstitial, and no slider that opens a new window. Adult ads are switched off for this website in the Adsterra dashboard, so the network is not allowed to serve them here.

The codes live in an inline loader on the page. Before you press Accept that loader contains only the two URLs as text: no script tag points at bicea.org, no ad frame is created, and nothing is requested from Adsterra. Press Accept and the loader creates the two script tags, which is the moment bicea.org and Adsterra's delivery hosts are contacted and an ad frame is built. Reject, Global Privacy Control, and doing nothing all leave the loader idle, and clearing the choice with Cookie settings in the footer removes the placements from the next page you open.

What Adsterra stores once its script runs: a cookie named `pip_2db5466f2e8180fa430e3d8b142c88dc`, set on bicea.org rather than on talesofeternia.org, holding the placement and browser identifier for these two units (1 day, SameSite=None). Adsterra's own code also keeps frequency-cap, impression and viewability counters in the browser storage that belongs to the ad frame; those keys are written and read by Adsterra inside its frame, they are not set by this site and we cannot read them from our pages. Delivery and reporting requests go to bicea.org and to Adsterra's endpoints, and they include your IP address, user agent, and the page URL. Purpose: show and measure the ads you agreed to. Legal basis: your consent, which is the Accept click and nothing else.

You can turn personalized advertising off network-wide at Adsterra's cookie page, with the European EDAA tool if you are in the EU/EEA, or with the NAI opt-out in the US. Rejecting here is simpler and stronger: the ad scripts are never created, so there is nothing to opt out of. Retention on Adsterra's side follows its own cookie policy, linked above; we do not receive a copy of that identifier.

Microsoft Clarity, after you press Accept

Clarity (project `yz9m35sh00`) records how pages are used: clicks, taps, scrolling, and a session replay of the page as you saw it, plus heatmaps built from that. The script is injected by an inline loader on the page only when the consent event fires with Accept, so a Reject, a Global Privacy Control signal, or no choice at all leaves clarity.ms untouched. Once loaded, the replay data goes to Microsoft's clarity.ms endpoints, and Microsoft keeps it for up to 30 days as described in the Microsoft Privacy Statement. Clarity masks text you type, and our forms are only the search-free navigation links on the site, so no payment or account data is captured. Withdrawing the choice with Cookie settings in the footer stops future pages from creating the script; the _clck and _clsk cookies go with your site data.

YouTube, after you press play

Trailers use a locally hosted picture and a button. Nothing is requested from YouTube until you press play. The player then connects to Google/YouTube through youtube-nocookie.com; player assets and video delivery can also use youtube.com, ytimg.com, ggpht.com (channel pictures), googlevideo.com, and Google's related infrastructure. Google may set cookies and read the player request, including your IP address and browser information. Purpose: show the official Bandai Namco trailer you asked for. Legal basis: consent, which is the separate play click, even if you previously rejected optional site tracking. Accept alone never loads a player. Reject in Cookie settings removes an active player. Retention is Google's, described in Google's privacy policy. We do not receive a copy of those cookies.

Global Privacy Control

If navigator.globalPrivacyControl is true, the page treats that as Reject and prevents Accept from granting optional site tracking. We do not sell personal information and we do not run personalized ads. A separate play click requests a YouTube video; GPC does not silently load it. A classic Do Not Track header is not visible to this page's script. With Global Privacy Control on, the ad loader stays idle as well: no script is created for bicea.org, so no Adsterra cookie is written.

Your rights

You can access, correct, delete, or restrict the choice we store, and you can withdraw the analytics permission Accept gives, by emailing contact@talesofeternia.org or by clearing site data for talesofeternia.org. Deleting localStorage key toe_consent_v1 removes the choice and puts the page back to analytics denied; clearing site data also removes the _ga cookies. You can complain to your local data protection authority. We do not run user accounts, so there is no profile on a server to export.

Changes

When a script is added or removed, this page and the updated date change together. The date on this page is the check date.