Privacy policy
Last verified (source review): . Data snapshots retain their own timestamps; this is not a live feed or a fresh client playtest.
What the site actually loads
| Party | Purpose | When it runs | Storage and retention |
|---|---|---|---|
| This site (moomoomystery.com) | Remember your Accept or Reject choice and whether you closed the ad bar | On the first visit the page writes granted unless Global Privacy Control is on; only your own click changes it | localStorage key mmm_consent: choice, ts, v (180 days). localStorage key mmm_socialbar_closed: closed, ts, v (180 days). No cookie is set by the guide itself. |
| Google Analytics 4 (G-2M3ZMQ0R8M) | Count page views and see which guides are read | Default on, including a first visit; Reject stops loading | Loader: www.googletagmanager.com; measurement: google-analytics.com and regional subdomains. Cookies _ga and _ga_2M3ZMQ0R8M normally expire after 2 years, subject to browser limits and property settings. Event retention is controlled by the property; we have not independently audited its current setting. |
| Microsoft Clarity (project z421cv3q5d) | Heatmaps and session recordings so layout problems are visible | Default on, including a first visit; Reject stops loading | Hosts: www.clarity.ms, scripts.clarity.ms, and collection subdomains such as q.clarity.ms. Cookies include _clck (1 year), _clsk (1 day), and potentially MUID. Standard recordings last 30 days; favorite and sampled recordings can last up to 9 months under Microsoft’s policy. Input masking depends on Clarity settings and is not a guarantee for all page text. |
| Adsterra (publisher 3403020; Native Banner unit 31943699 and Social Bar unit 31943700) | Serve the in-page ad and the fixed bottom bar, with advertising measurement and anti-fraud checks | Default on, including a first visit; Reject stops loading; closing the Social Bar hides it | Tag host bicea.org also requests campaign assets and measurement scripts. Observed downstream hosts include cdn.storageimagedisplay.com, cdn.show-creative1.com, cdn.show-sb.com, cdn.cloudpiko.com, static.nresystems.com and m1.openfpcdn.io. Advertising partners may inspect device/browser signals, use fingerprinting techniques, and set campaign-specific cookies or localStorage. Other demand-partner hosts and lifetimes vary between campaigns. |
| YouTube (youtube-nocookie.com) | Play a creator video when you ask for it | Only after a Play click while the site choice is granted | The embed and its player assets can contact youtube-nocookie.com, youtube.com, ytimg.com and googlevideo.com. Google’s policy applies after the iframe is created. The initial page has no YouTube request or iframe. |
| Cloudflare and mail-hub | Domain DNS and contact-address mail routing | DNS queries and messages sent to the contact address, not a browser tracking script | Cloudflare MX routes [email protected] to the mail-hub Worker. Correspondence and mail metadata are processed for handling your request. Hosting-provider request logs may also exist; no Cloudflare browser analytics tag is installed. |
Default loading, and how to turn it off
Google Analytics 4, Microsoft Clarity and Adsterra load as soon as a page opens, without waiting for a click. The banner is notice and a withdraw switch, not a gate: it appears on the first visit, explains what is running, and offers Accept and Reject.
Pressing Reject writes mmm_consent with choice denied for 180 days and reloads the page. The loaders then stop GA4, Clarity, the Native Banner and the Social Bar before any vendor request is made. Consent Mode also updates advertising and analytics storage to denied. Existing third-party cookies are not erased and data already sent cannot be recalled. Accept turns the loaders back on, reloading if needed. Cookie settings in the footer reopens the banner. Global Privacy Control is treated as Reject and is not overridden by the banner.
Closing the fixed Social Bar writes mmm_socialbar_closed for 180 days, so it does not come back on the next page or the next visit. Clearing site data removes both records immediately. Ad blockers and browser tracking protection can also stop any of these scripts; the guide works without them.
Cookies and local storage in plain terms
A cookie is a small file a site or a third party asks the browser to store and send back with later requests. localStorage is a key-value store that stays in the browser and is not sent with requests; this guide uses it for the two choice records above. Neither record contains a name, an email address, or the text of anything you type.
Google receives the page URL, approximate location and device/browser details for analytics. Clarity receives session metadata and recorded page interactions; masking depends on its settings, so do not enter sensitive information into page text. Advertising partners receive request and device/browser data as described above. We do not pass the content of emails sent to our contact address into these page tags.
Legal basis, retention, and your rights
- The actual default-on behavior is disclosed above. A notice is not the same as opt-in consent. This page does not claim that default loading satisfies every jurisdiction’s consent rules; requests about local rights can be sent to the contact address.
- The two first-party localStorage records expire logically after 180 days, when loaders ignore or replace them. They are not automatically deleted on day 180. GA4 retention follows its property settings; standard Clarity recordings last 30 days, with favorites and samples up to 9 months. Adsterra retention depends on the campaign. Clearing this origin’s data removes the local records, not third-party data already collected.
- You can ask what correspondence we hold, correct it, or have it deleted by emailing [email protected]. You can object to our handling of that correspondence at the same address. We do not sell correspondence. Advertising partners handle browser identifiers under their own policies; use Reject to stop their tags on this site.
- Personalized advertising: you can opt out at Google Ads Settings, the NAI opt-out, YourAdChoices, or Adsterra’s own privacy policy and opt-out. Reject on this site also stops the Adsterra tags from loading at all.
- Children: the guide may be read by people under 13. We do not ask for names or accounts, and the ad and analytics tags are not directed at children. A parent can email the contact address to ask what is stored or to have it removed.
- Changes: the date on this page moves when the vendor table changes. Advertising creatives and downstream hosts can change between requests; the named creative hosts are observations, not a fixed allowlist.
Questions
Do you use cookies?
The guide itself writes two localStorage keys, mmm_consent and mmm_socialbar_closed, not a first-party cookie. GA4 can set _ga and _ga_2M3ZMQ0R8M; Clarity can set _clck, _clsk and MUID. Adsterra partners may use cookies or device signals. Actual storage depends on browser restrictions and the campaign. YouTube may use storage after you press Play.
Do analytics and ads wait for me to press Accept?
No. GA4, Clarity and Adsterra load by default from the first page view. The banner tells you so; pressing Reject turns them off and remembers that for 180 days.
How do I change my choice?
Use Cookie settings in the footer. Reject stores a denied choice for 180 days and reloads with the tags stopped; Accept turns them back on.