This policy names every third party the site loads, the storage each one may use, and how to turn the optional ones off. It was checked against the layout source and the Adsterra panel on 28 October 2026.
The identifiers below match the configured tags and saved integration records. The policy separates documented vendor storage from requests observed during the 28 October 2026 local-build review. Delivery hosts can change.
What loads on every page
The table lists the third parties the built pages request. GA4 is the one third-party script written into the head. Clarity and both Adsterra units are created by a first-party loader in the page, so their host names appear in the inline loader rather than static script src elements and they do not block the first paint.
All four services are on for a first visit; Reject turns GA4, Clarity and both Adsterra units off. YouTube is the exception: the player stays click-to-load, and a youtube-nocookie.com frame is requested only when you press Play on a cited video.
| Party | Purpose | When it loads |
|---|---|---|
| wowsurvivors.net (this host) | Serves the guide pages, images and the consent record | Every request; the page renders without a third-party script |
| Google Analytics 4 — measurement ID G-LGC7TTEHQX | Counts page views and aggregate traffic sources | First paint, by default |
| Microsoft Clarity — project z4j4jq57ff | Heatmaps and session recordings, with sensitive fields masked by Clarity | First paint, by default |
| Adsterra — Native Banner NativeBanner_1 (unit 31959606) and Social Bar SocialBar_1 (unit 31959607), publisher 3403020, website 6156172 | Serves the sponsored Native Banner in the page and the fixed Social Bar overlay | First paint, by default |
| YouTube (youtube-nocookie.com) | Plays a cited video | Only after you press Play on that video |
Cookies and local storage
The site writes the two localStorage keys below. GA4 and Clarity may also set first-party cookies on this site; Microsoft and ad delivery hosts may set their own third-party cookies. Names and lifetimes depend on vendor settings and browser restrictions. The table describes vendor-documented storage, not a guarantee that every cookie is set on every visit.
Google Analytics requests www.googletagmanager.com and www.google-analytics.com. Microsoft Clarity requests www.clarity.ms, scripts.clarity.ms and regional *.clarity.ms collection hosts. Adsterra delivery hosts and creative CDNs rotate. Current requests can reach bicea.org, static.nresystems.com, cdn.storageimagedisplay.com, cdn.show-sb.com, cdn.show-creative1.com, cdn.holdbitter.com and cdn.cloudpiko.com. Those hosts receive your IP address, user agent and the page you came from when the browser requests a creative or a notification file.
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
| ws_consent (localStorage) | wowsurvivors.net | The banner record: choice, timestamp and version | 180 days |
| ws_adbar_closed (localStorage) | wowsurvivors.net | Remembers that you closed the Adsterra Social Bar | 180 days |
| _ga | wowsurvivors.net, via Google Analytics | Distinguishes browsers for aggregate measurement | 2 years |
| _ga_LGC7TTEHQX | wowsurvivors.net, via Google Analytics | Keeps GA4 session state for this measurement ID | 2 years |
| _clck | wowsurvivors.net, via Microsoft Clarity | Clarity user identifier used to stitch a visit | 1 year |
| _clsk | wowsurvivors.net, via Microsoft Clarity | Clarity session identifier used for recordings and heatmaps | 1 day |
| CLID | clarity.ms | Microsoft Clarity identifier | 1 year |
| MUID | clarity.ms / microsoft.com | Microsoft user identifier used by Clarity | 1 year |
| pip_<32 hex characters> | bicea.org | Adsterra delivery and frequency control for the two units | 1 day or the browser session |
| __cf_bm | bicea.org | Cloudflare bot management on the Adsterra delivery host | 30 minutes |
| uid_id2, ak, acl | static.nresystems.com | Adsterra creative delivery and measurement | About 13 months for uid_id2; about 90 days for ak and acl |
| YouTube cookies such as YSC, PREF and VISITOR_INFO1_LIVE | youtube-nocookie.com / youtube.com | Playback, preferences and view measurement after you start a video | Set and controlled by Google; from the session to about 2 years |
Default on, and how to turn it off
On a first visit with no stored choice, the page treats optional services as granted, updates Google Consent Mode v2 to granted, starts GA4, Clarity and both Adsterra units with the first paint, and shows the banner. The banner is a notice and a withdrawal control; it does not hold the scripts back while it waits for a click.
Reject overwrites the record with denied for 180 days. The page removes the Clarity and Adsterra script tags and their slots, hides the native unit and the Social Bar, and updates gtag so analytics_storage and the three ad signals are denied, then reloads the page to unload already-running vendor code. Returning rejected visits do not request these tags. Accept stores a granted record for 180 days. Without an explicit choice the notice remains visible on later pages. Cookie settings in the footer reopens the banner so you can change the choice at any time. When the 180-day record expires, the next visit is a new default-on visit.
If navigator.globalPrivacyControl is true, or Do Not Track is 1, the page treats the visit as Reject and does not show advertising or recording scripts. The Social Bar also has its own Hide ad bar button: closing it stores ws_adbar_closed for 180 days, so the bar does not come back on reload or on the next page.
The Adsterra units are sized and clipped locally. The native slot is constrained to the content width, the Social Bar is constrained to 100vw with overflow hidden, and the page reserves bottom padding while the bar is present.
Legal basis, retention and your choices
This site currently uses a default-on notice with an opt-out. An automatic default is not an affirmative act of consent. Hosting and security logs support delivery and abuse prevention. Privacy rights and legal requirements vary by location; this policy describes the actual behavior and does not claim a legal review. Global Privacy Control and Do Not Track are honoured as an opt-out.
Google Analytics 4 keeps event-level data for 2 months by default; the property can be set to retain it for up to 14 months. Microsoft Clarity keeps session recordings for 30 days and aggregated heatmap data for up to 13 months. Adsterra and YouTube keep data under their own policies and retention settings, which this site does not control.
You can object to or withdraw consent at any time, ask what the site holds, or ask for deletion by writing to [email protected]. The site itself holds only the two localStorage keys in your browser; deleting them clears the record. For personalised advertising, use Google Ads Settings, the industry opt-out at optout.aboutads.info, the NAI opt-out at optout.networkadvertising.org, or Adsterra privacy policy. Those choices are per browser and per vendor; Reject on this site is the switch for this site.
Changes and contact
This policy changes when a tag or a storage key changes, and the date at the top moves with it. Questions go to the contact page or to [email protected].
/privacy-policy/, /cookie-policy/ and /cookies/ redirect here.
Questions
Does the site load analytics and ads before I click Accept?
Yes. GA4, Microsoft Clarity and both Adsterra units start with the first page view. The banner tells you and lets you withdraw; Reject turns them off for 180 days.
How do I change my choice?
Use Cookie settings in the footer, then Accept or Reject. The record is stored in localStorage under ws_consent for 180 days.
What happens to the Social Bar when I close it?
The Hide ad bar button stores ws_adbar_closed for 180 days and removes the overlay, so it stays closed on reload and on later pages.
Sources and verification limits
Checked 2026-10-28. Two independent publishers are needed to call a claim confirmed. A menu, screenshot and script from Aethus count as one publisher. Exact menu HP, racial values and dated build identifiers are single-source observations. A video or a general game report does not independently verify every number. Missing values remain unreported; disagreements stay attributed.
- Editorial policy and corrections
First-party policy; describes this guide, not game facts.
- Google Analytics cookie documentation
Vendor-documented storage; browser and property settings can change lifetimes.
- Microsoft Clarity cookie documentation
Vendor documentation, not a claim that every cookie was observed.
- Adsterra privacy policy
Advertising vendor and its data policy.