Privacy Policy

Who we are

The site operator can be reached at [email protected]. This policy matches the build reviewed on 3 Nov 2026 and names every third party the pages request.

What loads on the first page view

This site is default-on. When your browser has no saved choice, we treat the visit as granted and load Google Analytics 4, Microsoft Clarity and Adsterra on the first page view, before you answer the banner. The banner is a notice with two buttons, not a gate in front of the scripts. Reject reloads the page to terminate already running vendor scripts, stops later page views from creating them, and stores the denial for 180 days. The footer link Cookie settings reopens the notice so you can change the choice at any time. If your browser sends Global Privacy Control, or Do Not Track is 1, we store denied and load none of the three.

The HTML we send contains only URL strings for Clarity and Adsterra. The page script creates those tags during page initialization; they are requested before you answer the banner. The Google Analytics 4 tag is loaded from googletagmanager.com, and an inline Consent Mode block sets ad signals to denied and analytics_storage to granted before the tag configures.

Third parties in use

Vendor	Purpose and when it runs	Cookies, storage and retention
Google Analytics 4 (measurement ID G-H7VDBB9NC1)	Counts page views and reads aggregate traffic reports. The tag at www.googletagmanager.com and collection at www.google-analytics.com run on the first page view, before you answer the banner.	First-party cookies _ga and _ga_H7VDBB9NC1, each kept about 2 years. Google keeps event data for the retention period configured on the property. Reject updates Consent Mode to denied and reloads the page without the Google tag.
Microsoft Clarity (project z7unefam86)	Builds heatmaps and session recordings so we can see which guide sections people skip. The tag loader at www.clarity.ms/tag/z7unefam86, its code at scripts.clarity.ms, and collection endpoints on *.clarity.ms run on the first page view. Analytics storage starts granted and advertising storage starts denied.	First-party cookies _clck (about 1 year) and _clsk (about 1 day), plus a browser-storage mirror used to group a visit. Text typed into form fields is masked by default. Clarity controls retention in the project. Reject revokes Clarity consent signals and reloads the document without the loader.
Adsterra (publisher 3403020; Native Banner unit 32070967, Social Bar unit 32070968)	Serves the in-page Native Banner and the fixed Social Bar from bicea.org. Both run on the first page view unless you have rejected. Ad creatives can request their own delivery hosts; the first-view review observed only bicea.org for these units. Adult advertising is switched off at the Adsterra website level.	Adsterra may set cookies or local storage on bicea.org and on domains used by the creative, for frequency capping, measurement and interest-based ads. Names, domains and lifetimes vary with the creative; we do not have a stable, independently verified list. Adsterra controls retention on its own domains. Reject reloads the document without either unit and prevents subsequent requests.
YouTube (Google)	Only after you press Play on a video. Video frames before that are images we host, so the page does not contact YouTube until the click.	The player can set VISITOR_INFO1_LIVE (about 6 months), YSC (session) and PREF (about 8 months). Google's retention applies. The player is requested by your action of pressing Play.

Cookies and browser storage we write

• nfsb-consent in local storage: your choice (granted or denied) and an expiry 180 days ahead. We write granted on a first visit with no stored choice, then show the notice. Reject overwrites it with denied.
• nfsb-social-bar-closed in local storage: set when you close the fixed Social Bar, with an expiry 180 days ahead. Without it the bar would return on the next page view.
• No first-party advertising or analytics cookie is set by our own code. The cookies in the table above belong to the vendors and are set on their domains or as first-party cookies from their scripts.

Your choices and how to withdraw

Because the site is default-on, the notice is where you withdraw rather than where you opt in. Press Reject in the banner or in Cookie settings: the consent signals move to denied and the document reloads without the Google, Clarity or Adsterra scripts, ending their activity in the old document. The denial is remembered for 180 days. Clearing site data brings the notice back and restores the default-on behaviour, because no choice is then stored.

For interest-based advertising you meet elsewhere, use Google Ads Settings, the Digital Advertising Alliance opt-out, Your Online Choices, or the Adsterra privacy policy. Those are external preference tools; on this site, Reject is the direct opt-out because it removes the ad units instead of only switching them to non-personalized mode.

Default settings and privacy requests

The stored value granted is our operational default for loading these vendors; it is not a record that you clicked OK. The advertising Consent Mode signals start denied and analytics storage starts granted. Pressing OK updates all four signals to granted. Pressing Reject updates them to denied and reloads without the vendors. To ask about processing, object, or request deletion, use the brand email below. Browser signals and saved denial are honored on subsequent visits.

Retention

Your choice and the Social Bar close marker stay in your browser for 180 days unless you clear them. Vendor cookies follow the lifetimes in the table. Analytics reports are kept for the retention period configured in the GA4 property; Clarity recordings follow the project's retention setting; Adsterra keeps campaign and measurement data under its own policy. Mail you send us is kept long enough to answer and to keep a correction log.

Your rights and contact

You can ask for access, correction, deletion, restriction, or a copy of the personal data we still hold, and you can object to further processing, by writing to [email protected]. For data Adsterra itself collected, use its privacy policy; for Clarity, use the Microsoft privacy statement. You may also complain to your local data-protection authority. Please do not send personal information about children.

Changes

If we add or remove a third party, this page will name the vendor, the purpose, and the cookie or storage names before that script ships. The checked date at the top moves with the edit.