Privacy Policy

Who is responsible

The publisher is the crazy8ball.org desk, an independent guide to the Roblox game CRAZY 8 Ball. Email [email protected]. This policy covers crazy8ball.org only. The site is static: there are no accounts, no payments, no comment form and no newsletter, so we hold no server-side profile of you.

Default loading, and how to turn it off

This site follows a default-on model. On the first view it requests Google Analytics 4, Microsoft Clarity session replay and the two Adsterra units, and it shows the cookie banner at the same time. The banner is a notice with an Accept and a Reject button, not a gate: no vendor waits for you to press Accept. Only Reject turns the vendors off.

Reject writes denied to the first-party local-storage key c8b-consent, sets the Google and Clarity consent signals to denied, removes the Adsterra units, and reloads the page so already-running scripts stop. The denial is read in the page head before any vendor script can be requested and is remembered for 180 days. The footer control “Cookie settings” opens the banner again; Accept restores all three and clears a remembered Social Bar dismissal. Global Privacy Control (navigator.globalPrivacyControl) and Do Not Track are treated as Reject without waiting for a click. The choice itself is stored in local storage, not in a first-party cookie.

Google Analytics 4

Google Analytics 4 (Google LLC) runs through gtag.js from www.googletagmanager.com, Measurement ID G-VBQGYCVTE0. Measurement requests go to google-analytics.com and its regional subdomains. Data can include page views, approximate location derived from IP, device, browser, referrer and a client identifier. Purpose: measure readership and which guides are useful. Legal basis: our legitimate interest in understanding readership, with consent where local law requires it; Reject withdraws that choice.

Google documents the _ga and _ga_<measurement-id> first-party cookies with a default two-year lifetime; browser settings and Google configuration can shorten that. The dataLayer is only an in-memory queue. GA4 user-level data retention can be configured to 2 or 14 months; this page does not assert the property's selected value. Reject prevents future GA4 requests on this origin but does not erase data already held by Google. Google's privacy policy: policies.google.com/privacy.

Microsoft Clarity

Microsoft Clarity (Microsoft Corporation), project z7sreybjjc, loads from www.clarity.ms and scripts.clarity.ms and sends collection requests to clarity.ms subdomains. It records clicks, scrolling, heatmaps and session replays so we can see where a guide is hard to use. Collection starts by default. The page calls Clarity's consent API with analytics and advertising storage granted, and Reject sends denied signals before reloading without the Clarity SDK.

Microsoft lists first-party Clarity cookies _clck and _clsk, and third-party cookies CLID, ANONCHK, MR, MUID and SM. Its cookie list does not specify expirations; which cookies are set depends on browser and consent behavior. Clarity playback data is retained for 30 days; labeled or favorited sessions and click data for 9 months. We do not claim that every documented cookie is set on every visit. Microsoft's privacy statement: privacy.microsoft.com/privacystatement.

Adsterra advertising

Advertising is served by Adsterra through its script host bicea.org, publisher id 3403020, website 6171803. Two page-level units are configured and both load by default: Native Banner unit 32068683 (NativeBanner_1) inside the page, and Social Bar unit 32068684 (SocialBar_1), a fixed strip at the bottom of the viewport. Neither invoker script is in the HTML the server sends; the page creates both on the first view. Adult ads are switched off in the Adsterra dashboard, and this build enables no Popunder, Banner or Smartlink unit.

Adsterra receives requests that can include your IP address, user agent, referrer and page URL. Its scripts and downstream advertisers may set cookies or local-storage entries for frequency capping, fraud prevention and ad measurement; vendor names and lifetimes vary and we do not invent a complete inventory. The Social Bar also writes a first-party key, c8b-floating-ad-closed, when you close the strip, so it stays closed for 180 days. Default loading is not evidence that you affirmatively consented to advertising. Reject prevents both invoker requests on later documents.

Personalized-advertising controls: Google Ads Settings, the Digital Advertising Alliance opt-out, Your Online Choices (EU), and the NAI opt-out. Adsterra's policy: adsterra.com/privacy-policy.

YouTube

The home page shows a locally hosted YouTube thumbnail and a play button. Only when you press play does the page insert an iframe to www.youtube-nocookie.com; Google may then set its own cookies and receive your IP address and the page URL. Purpose: play the one video you asked for. Legal basis: your click. We do not receive a view log. Google/YouTube policy: policies.google.com/privacy.

Other third parties

This build directly integrates only Google Analytics 4, Microsoft Clarity, Adsterra and the click-loaded YouTube player. There is no AdSense, no Google Tag Manager container, no traffic-mesh or other banner SDK, no social embed and no newsletter widget. Fonts are local system fonts, not Google Fonts. Links to Roblox and shops are ordinary links: those sites start only when you follow them and their own policies apply there.

Storage keys and retention

• c8b-consent — first-party local storage, JSON {choice, exp}. Value granted or denied. Retention 180 days, then it is ignored. Purpose: remember Accept/Reject without asking on every page view.
• c8b-floating-ad-closed — first-party local storage, JSON {closed, exp}. Written when you close the Adsterra Social Bar. Retention 180 days. Purpose: keep the strip closed across reloads and later visits.
• Vendor cookies and identifiers — the GA4, Clarity and Adsterra items listed above, set by those vendors under their own policies and retention periods.

Neither first-party key is a cookie and neither leaves your browser. Clearing site data in the browser removes both.

Your rights and how to use them

Under the GDPR and similar laws you can ask what is held about you, ask for correction or deletion, object to processing based on legitimate interest, and withdraw consent at any time through “Cookie settings” or by pressing Reject. Mail the address above. There is no account database to delete on our side, and most data sits with the vendors named above — we will point you to their request forms. You can complain to your local data-protection authority. This site has no direct sale of personal information; advertising partners' identifier processing is described above, and you can opt out through Reject or Global Privacy Control.

Changes

If a tag or ad unit is added, this page and the date at the top change in the same release, and the new name is added before the tag ships. The date on this page is 3 Nov 2026.