DEFAULT ON, REJECT TO WITHDRAW
Privacy, cookies and the scripts on this page
This policy describes the site as it is built on 29 October 2026. Google Analytics 4, Microsoft Clarity and Adsterra ads load on the first view. The banner tells you that and gives you a Reject button; Reject turns those scripts off and remembers the choice for 180 days. There is no account, no newsletter and no server-side copy of your visit.
I run this guide and I am the controller for it. First-party storage includes the consent and ad-close records, plus provider cookies while their scripts are enabled. The analytics, session-replay and advertising data described below goes to Google, Microsoft and Adsterra under their own terms. I use the reports to see which pages answer a question and which need a rewrite; I do not build profiles of individual readers or sell data.
What loads, and when
On arrival, before you click anything, the page creates three third-party scripts: Google Analytics 4 (measurement ID G-GCFMDBDMLG), Microsoft Clarity (project z53jmads8h) and Adsterra (publisher 3403020, website 6159101, units NativeBanner_1 31978943 and SocialBar_1 31978944). The consent banner is notice plus a withdrawal control, not a gate. OK keeps them on; Reject removes them and writes the denial to localStorage for 180 days.
Global Privacy Control is honoured as a rejection even without a click. Cookie settings in the footer reopens the banner. Reject records denial, disables GA4 and stops Clarity, then reloads the page to terminate third-party timers and ad frames. The saved denial blocks GA4, Clarity and both ad tags on later visits for 180 days. This cannot undo information already sent before rejection.
YouTube is different: a trailer is a click-to-play facade. No YouTube iframe or YouTube cookie is created until you press the play button.
Google Analytics 4
Google Analytics 4 (GA4) is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. It records the page URL, referrer, approximate location derived from IP, device and browser details, and interactions such as scrolling and outbound clicks. IP addresses are not logged by GA4. Reports are aggregated.
GA4 may set first-party _ga and _ga_GCFMDBDMLG cookies, documented by Google with a default lifetime of up to two years. This guide does not claim that the older Universal Analytics _gid cookie is a GA4 identifier. Consent Mode v2 starts with analytics_storage granted and all three advertising signals denied. OK grants those signals; Reject denies them and prevents the tag from loading after reload.
Google receives analytics requests by default; Reject disables subsequent requests on this site. The current property retention setting has not been independently verified and is not stated as a fixed number here. Provider information: https://policies.google.com/privacy and https://support.google.com/analytics/answer/11397207.
Microsoft Clarity
Microsoft Clarity is provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. It records heatmaps, scroll depth and session replays of clicks and page views. Clarity masks text typed into form fields and, by default, does not capture passwords or payment data. The replay is linked to a random identifier, not to your name.
Clarity sets _clck (stores the Clarity user ID, up to 1 year), _clsk (connects page views into one session, 1 day), MUID (Microsoft user identifier, up to 1 year), ANONCHK (checks whether the session is anonymous, about 10 minutes), CLID (identifies the first landing page, up to 1 year) and SM (session marker, session length). The tag is https://www.clarity.ms/tag/z53jmads8h and reports go to *.clarity.ms.
Clarity loads by default and Reject stops it. The current project recording-retention setting has not been independently verified; no project-specific retention period is promised here. Microsoft's privacy statement is https://privacy.microsoft.com/privacystatement and its cookie documentation is https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list.
Adsterra advertising
Adsterra is provided by Adsterra Network (Advance Group Ltd). This site runs two page-level formats: Native Banner (unit 31978943, script https://bicea.org/21/f0a8b1e555a68ce974955e116fcea79b) and Social Bar (unit 31978944, script https://bicea.org/14/2c32346c12e8ebb8b90a8f1bba7a8850). Adult ads are switched off for this website (adult: false). There is no Popunder, Banner or Smartlink unit here.
Adsterra and its ad-serving domain bicea.org may set cookies and localStorage entries for frequency capping, fraud prevention, geographic targeting and measuring an impression. The network chooses those names, so they are not fixed by this site; you can inspect them under the bicea.org and adsterra.com origins in your browser's storage panel. The Native Banner is an in-flow slot; the Social Bar is the fixed card at the bottom-right, with a local close button that stores tbg.adsterra.social.closed for 180 days and stops the bar loading again while that record is fresh.
Both Adsterra units request content by default. Reject terminates their scripts and frames through a page reload and prevents reinjection while the saved denial is valid. Adsterra's privacy policy is https://adsterra.com/privacy-policy/. Advertising delivery can involve additional provider subdomains, which are recorded in the dated browser audit.
Provider request hosts observed on 29 October 2026
Local browser measurements found Google requests to www.googletagmanager.com and www.google-analytics.com; Microsoft requests to www.clarity.ms, scripts.clarity.ms and lettered collection subdomains under clarity.ms. Adsterra scripts at bicea.org also initiated requests to static.nresystems.com, cdn.storageimagedisplay.com, cdn.show-sb.com, cdn.show-creative1.com and cdn.cloudpiko.com. These are downstream requests from the default-on integrations, so Reject disables their parent integrations as well. Creative delivery hosts can change; this list is a dated observation rather than a promise of a permanent host list.
YouTube services are contacted only after pressing play. Fonts, screenshots and trailer facades are served locally. There are no external font-provider requests.
YouTube trailers
Trailer buttons initially show local images. Pressing play creates an iframe on https://www.youtube-nocookie.com/embed/; until then no request goes to YouTube. Playback sends Google your IP address and browser information. Storage can depend on playback and provider settings; this guide does not claim that every historical YouTube cookie is set on every visit. Provider policy: https://policies.google.com/privacy.
Everything stored, key by key
The table lists the storage this site and the scripts it loads can create. First-party keys are written by this origin; the network cookie names are the documented defaults and can change when a provider updates its tag. Retention is the maximum lifetime in the browser, not a promise that a provider keeps server-side records that long.
The site directly integrates GA4, Clarity, Adsterra and click-to-play YouTube. Their downstream delivery hosts are listed above. Changes to directly integrated providers are documented here.
| Key | Where | Purpose | Retention |
|---|---|---|---|
| tbg.consent | localStorage (this origin) | Records OK, Reject or Global Privacy Control | 180 days |
| tbg.adsterra.social.closed | localStorage (this origin) | Remembers that the Social Bar was closed | 180 days |
| _ga | Cookie (this origin) | GA4 browser identifier | up to 2 years |
| _ga_GCFMDBDMLG | Cookie (this origin) | GA4 session state for this measurement ID | up to 2 years |
| _clck | Cookie (this origin) | Clarity user identifier | up to 1 year |
| _clsk | Cookie (this origin) | Clarity session stitching | 1 day |
| MUID / ANONCHK / CLID / SM | Cookie (.clarity.ms / this origin) | Microsoft identity and Clarity session checks | 10 minutes to 1 year |
| Adsterra cookies and storage | bicea.org / adsterra.com | Frequency cap, fraud prevention, geo targeting, impression measurement | Provider controlled; not independently verified here |
| YouTube player storage | youtube-nocookie.com / Google player services | Only after the visitor presses play | Provider controlled; not independently measured here |
Your choices and rights
Reject in the banner, or Cookie settings in the footer followed by Reject, records denial for 180 days. The page reloads so already executing analytics, recording and advertising code is terminated. Later visits do not request those tags while denial is fresh. Clearing this origin's localStorage removes that record and restores the default-on state and banner.
You can ask what personal data is processed, request access, correction or erasure, object to processing based on legitimate interest, or complain to your local data-protection authority. Write to [email protected] with the page URL and the request. Because I do not hold a server-side copy of analytics or ad data, requests about Google, Microsoft or Adsterra records may need to go to those companies as well; I will tell you which one applies.
This policy is reviewed when a script, a provider or a retention setting changes. The checked date at the top of the page is the version date. The footer link is the notice.
Questions
Do the analytics and ad scripts wait for me to press OK?
No. They load on the first view. The banner is notice plus a Reject control: pressing Reject turns Google Analytics 4, Microsoft Clarity and Adsterra off and stores that denial for 180 days.
Do you sell personal data?
No. There is no account and no data broker feed. The site uses aggregate analytics and network advertising; it does not sell a list of readers.
How do I stop the bottom bar coming back?
Press the Close sponsored bar button. That writes tbg.adsterra.social.closed to localStorage for 180 days and stops the Social Bar from loading on this and later pages while the record lasts. Reject also removes it.
Are adult ads enabled?
No. The Adsterra website is recorded with adult ads off, and the site runs only Native Banner and Social Bar units.
Keep going
Version line: 1.0 plus the 28 October 2026 hotfix, unless a paragraph says otherwise. Patch notes. Sources. Checked 2026-10-29. Store: Steam. Wiki: thebossgangster.com/wiki.