Privacy Policy
I wrote this against the tags that are actually in the build: GA4 G-H56Z7PV8B4, Clarity project z243irmyaf, and Adsterra units 31878667 and 31878668. The policy names each host and first-party key, describes the vendor keys, and says the tags load by default, with Reject as the withdrawal.
Who to write to
The publisher of traumalab.net is the controller for the pages on this domain. Email [email protected]. The game studio, Abynotic Studios, is not the controller of this guide. This policy was checked on 23 October 2026; a change is posted here with a new checked date. We do not sell personal information.
What loads when you open a page
The default is on. With no saved choice, the page loads Google Analytics 4 (measurement id G-H56Z7PV8B4), Microsoft Clarity (project z243irmyaf) and two Adsterra units: NativeBanner_1 (31878667) and SocialBar_1 (31878668). The cookie banner is notice and withdrawal, not a gate: it appears on the first visit, while those tags are already loading. Press Reject to stop them and remember the choice for 180 days. Press Accept to keep them on and remember that too. The footer link Cookie settings brings the banner back at any time.
Global Privacy Control, or a Do Not Track value of 1, is treated as Reject on the first visit. YouTube and itch.io are separate: their players are created only when you press play, not at first paint, and they are not switched on or off by this banner.
Cookies and localStorage
These are the stores this build actually uses. Google Analytics 4 is loaded from www.googletagmanager.com and reports to *.google-analytics.com. Microsoft Clarity is loaded from www.clarity.ms/tag/z243irmyaf, pulls scripts.clarity.ms, and reports to *.clarity.ms/collect. The Adsterra unit loaders come from bicea.org; the filled ads and their measurement stay on Adsterra and bicea.org domains.
Clarity masks text entered into form fields by default, so what you type into a calculator or search box is not recorded. We do not run Google AdSense, a popunder, a smartlink, or a traffic-mesh banner SDK on this site.
| Name | Who sets it | Purpose | Kept |
|---|---|---|---|
| tl_consent_v1 | This site, localStorage | Ads and analytics choice (granted or denied), its source and expiry | 180 days |
| tl_adbar_closed | This site, localStorage | Remembers that the floating Adsterra Social Bar was hidden, so it does not return on reload | 180 days |
| _ga, _ga_0MPEFNKSMC | Google Analytics 4, first-party cookies | Distinguishes visitors and sessions for measurement id G-H56Z7PV8B4 | Up to 2 years |
| _clck, _clsk, CLID, MUID, MR, SM | Microsoft Clarity, first-party and Microsoft-domain cookies | Visitor and session ids for project z243irmyaf (heatmaps and recordings) | _clck up to 1 year; _clsk about 1 day; CLID/MUID up to 13 months |
| __cf_bm | Cloudflare for bicea.org, first-party cookie on bicea.org | Bot management for the Adsterra unit requests | About 30 minutes |
| Adsterra unit storage | Adsterra, localStorage and cookies on traumalab.net, bicea.org and adsterra.com | Delivery, frequency capping and measurement for units 31878667 and 31878668; the unit generates its own key names, visible in your browser storage for those origins | Adsterra controls it; see its policy |
| VISITOR_INFO1_LIVE, YSC, PREF, CONSENT | YouTube / Google, after you press play | Player preferences, bandwidth and consent state | Their policy; session to about 2 years |
| itchio_token, G-JNRNM31J09 | itch.io, after you press Play | Embed session and itch.io’s own Google Analytics tag | Their policy |
Why we process it, and for how long
For Google Analytics 4, Microsoft Clarity and Adsterra, our legal basis is consent: the record starts as granted on a first visit and Reject withdraws it. The consent record itself is strictly necessary to honour that choice, so we keep it on the basis of our legitimate interest in respecting your settings. Serving the guide and keeping it secure is also a legitimate interest. We do not use these tools to make decisions about you or to build a profile for sale.
The consent and ad-bar records expire after 180 days. Google Analytics 4 keeps event and user data for 14 months by default. Microsoft Clarity keeps session recordings for up to 30 days and aggregated heatmap data for longer, as described in Microsoft’s Clarity documentation. Adsterra, YouTube and itch.io set their own retention on their own domains; their policies are linked below.
Server logs at our host may record the request IP, user agent and time for security and operations. They are not joined to the analytics or advertising ids above.
Your choices, including personalized ads
Reject in the banner is the direct opt-out here: it removes the Adsterra scripts, the floating bar and the Clarity tag, sets the GA4 consent signals to denied, and stores the refusal for 180 days. Cookie settings in the footer lets you change your mind. Cookies a vendor already wrote before you pressed Reject can stay until their own expiry; clearing site data for traumalab.net removes them together with tl_consent_v1 and tl_adbar_closed.
The Adsterra units can serve interest-based advertising. To limit personalized ads in your browser generally, use Google Ads Settings, the Digital Advertising Alliance opt-out, and Your Online Choices. For data Adsterra itself holds, use its privacy policy and opt-out route. For Microsoft Clarity, use Microsoft’s privacy dashboard and the Clarity privacy statement.
Google Ads SettingsDAA opt-outYour Online ChoicesAdsterra privacy policyMicrosoft privacy statementitch.io privacy policy
Other third parties on the page
The gameplay video is a YouTube embed for video wLB64xp-u-Y. Its iframe is created when you press the video button; YouTube may then set its own cookies and receive your IP address and the page URL. The playable build is an itch.io embed (upload 19947427); pressing Play creates that iframe, and itch.io may set itchio_token and load its own Google tag G-JNRNM31J09. Those services are controlled by YouTube/Google and itch.io, not by this site.
The site’s fonts are self-hosted files, so opening a page does not call Google Fonts. No social embed, chat widget or banner SDK loads at first paint.
Your rights and how to use them
Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, and to receive a copy of your data. Email [email protected] for requests about this site. For data Adsterra, Microsoft or Google collected on its own domains, use the contact route in that company’s policy. You can also complain to your local data-protection authority. Please do not send personal information about children.
A request about the local consent record can be satisfied by clearing site data for traumalab.net in your browser; that deletes tl_consent_v1 and tl_adbar_closed immediately. The analytics and advertising vendors hold their own copies under their policies, so a deletion request to them may also be needed.
Questions
Do ads and recordings load before I click Accept?
Yes. A first visit with no saved choice is treated as granted, so GA4, Clarity and the two Adsterra units start on the first view. The banner tells you and offers Reject; Reject stops them and is remembered for 180 days.
What does Reject actually stop?
It removes the Adsterra Native Banner and Social Bar scripts, removes the Clarity tag, sets GA4 ad and analytics consent to denied, and stores the refusal in tl_consent_v1 for 180 days. Accept or Cookie settings can turn them back on.
Which analytics ids are in this build?
Google Analytics 4 measurement id G-H56Z7PV8B4 and Microsoft Clarity project z243irmyaf. The Adsterra publisher is 3403020, website 6144042, units 31878667 and 31878668.
Does YouTube load on first paint?
No. The video is a facade; its YouTube iframe is created only when you press the video button. The same is true of the itch.io game embed, which is created when you press Play.
Sources
Checked 2026-10-23. Figures below are quoted from these pages, not invented here.