Privacy policy

This policy matches the scripts on the site as of October 19, 2026. If a vendor is added later, this page changes in the same update.

Last checked 2026-10-19 · By scrooms.org editors

Evidence and scope

This policy describes the site's October 19, 2026 implementation. Four vendors can be reached: Google Analytics 4 (storage denied by default), Microsoft Clarity session recording, Adsterra advertising, and YouTube after you press play. Analytics and Clarity follow the banner; the two Adsterra placements are only created after you accept, and no ad domain is contacted before that. Video playback is an optional third-party connection; privacy-enhanced embedding is not a promise of zero Google requests or storage.

Who is responsible

The operator of scrooms.org is the editor you reach at contact@scrooms.org. Roblox Corporation and the SCROOMS group do not run this site.

Third parties actually loaded

The initial page loads no advertising script and contacts no ad network. Google Analytics 4 (G-88VC2T15PN) starts before the config call with ad_storage, ad_user_data, ad_personalization, and analytics_storage set to denied, so it sends no analytics cookie until you accept. Microsoft Clarity (project z075vnfwqs) records sessions, clicks, and heatmaps and is not requested at all until you accept: rejecting the banner leaves it unloaded. The two Adsterra placements ship as URL strings only; their script tags are created by the consent handler after Accept, so no request reaches bicea.org or any Adsterra host beforehand. This site is hosted on Cloudflare Pages, which injects its own Web Analytics beacon (static.cloudflareinsights.com, operated by Cloudflare) into every page independently of the consent banner; it reports aggregate page views without setting a cookie, is not used for advertising, and is not shared with the ad network. Fonts and video preview images are served locally. Pressing a video play control creates a youtube-nocookie.com frame.

Once playback is requested, YouTube can contact Google-operated player, media, and image services, including youtube-nocookie.com, youtube.com, googlevideo.com, and ytimg.com. The exact subdomains and storage can vary with the player, device, region, and Google account state. These providers receive network information such as your IP address and browser details. A privacy-enhanced frame is not third-party-free playback.

Consent Mode v2 defaults are present as an inline function ahead of the gtag.js tag: ad_storage, ad_user_data, ad_personalization, and analytics_storage start as denied, with ads_data_redaction and url_passthrough set. This site never calls gtag('consent','update'), so those denied signals stay in force on every visit and Google Analytics writes no analytics cookie. Microsoft Clarity and the Adsterra placements are the tags that follow your banner choice. Accept creates the clarity.ms/tag/z075vnfwqs loader, which loads scripts.clarity.ms and reports to a *.clarity.ms collect endpoint, and creates both Adsterra snippet tags. Reject creates neither.

Cookies and localStorage

This site sets no first-party tracking cookie of its own. Three localStorage keys may be written in your browser:

Key	Purpose	Retention	Basis
scrooms_consent_v1	Stores Accept or Reject and a timestamp	180 days	Stores your preference or browser opt-out signal; not an analytics identifier
scrooms_progress_v1	Checklist on the progress tracker page	Until you clear site data	Optional local feature requested by ticking a box; not advertising consent
scrooms_floating_ad_closed	Remembers that you pressed Close ad bar, so the Adsterra Social Bar stays away	180 days	Stores your dismissal of the fixed bar; no identifier, and it is only written after you accept the ads and close the bar

Global Privacy Control or a recognized Do Not Track signal forces Reject. Accept cannot override either active browser signal; reopening settings does not remove that protection. If you do press Accept, Microsoft Clarity sets its own first-party cookies (_clck and _clsk) and may write its own browser storage so it can group a visit into one recording, and Adsterra may set its own cookies or browser storage from the bicea.org snippet so it does not show the same creative twice; Microsoft and Adsterra are the providers that set those, with their own names and lifetimes listed in their policies. Reject keeps the page free of clarity.ms and Adsterra requests, and clearing site data removes whatever Clarity stored as well as the three keys above.

Advertising (Adsterra)

Advertising on this site is served by Adsterra, an independent ad network and ad server that sells display inventory for publishers. Nothing is requested from Adsterra until you press Accept: the HTML ships the two placement URLs as strings only, and both snippet tags are created by the page's consent handler at that moment. Reject — or Global Privacy Control, which forces Reject — means no ad script, no ad request and no Adsterra cookie at all. Adult advertising is switched off for this website in the Adsterra dashboard.

Placements: Adsterra Native Banner, ad unit 31816525, in a labelled Advertisement box below the article; and Adsterra Social Bar, ad unit 31816526, a bar fixed to the bottom edge of the viewport with a Close ad bar button.
Where the code comes from: both snippets are served from bicea.org (bicea.org/21/4be966a1… for the Native Banner, bicea.org/14/ac298113… for the Social Bar). Any identifier Adsterra sets therefore normally lives on its own domain rather than on scrooms.org; those cookie names and lifetimes are chosen by Adsterra, not by us, and are listed in its own policy. This site writes no advertising identifier of its own.
Our keys on this origin: localStorage scrooms_consent_v1 (your accepted or rejected choice and its timestamp, 180 days) and localStorage scrooms_floating_ad_closed (a JSON object with closed set to true and a timestamp, written when you press Close ad bar, 180 days, so the bar stays closed across reloads and later visits). Neither key carries an advertising identifier.
Retention: the localStorage keys above expire after 180 days; after that the banner asks again and the Social Bar may return. Cookie lifetimes on bicea.org are set by Adsterra and end according to its policy.
Legal basis: your consent (GDPR Article 6(1)(a), and the ePrivacy rules on storing or reading information on your device) for the Adsterra scripts, its cookies and any personalised advertising. There is no legitimate-interest fallback for advertising here, and declining costs you no content on this site.
Personalised advertising opt-outs: Adsterra's own policy and opt-out at https://adsterra.com/privacy-policy/, the industry pages https://optout.aboutads.info and https://optout.networkadvertising.org, the EU/UK page https://www.youronlinechoices.com, and Google Ads Settings at https://adssettings.google.com. Blocking bicea.org in your browser or an extension also works — no part of the page depends on the ads.
ads.txt declares the seller actually in use: adsterra.com, 3403020, DIRECT. No other network, reseller, smartlink or popunder is declared or loaded, and this site runs one ad network only.

Withdrawing an earlier Accept: Cookie settings → Reject stops further ad loading, hides the ad box and the fixed bar and clears the reserved space at the bottom of the page, but requests already sent to Adsterra cannot be recalled. The Social Bar comes back on a later visit unless you close it or Reject; closing is remembered for 180 days under scrooms_floating_ad_closed.

Your choices

Use Cookie settings in the footer to reopen the banner and change the consent key. Clear localStorage in your browser to delete the checklist. Email contact@scrooms.org to ask what the editor holds. Mail you send is kept long enough to answer and fix the page, then deleted from the inbox on a normal cleanup. You can ask for access, correction, or deletion of that mail.

Ads are not personalised on your device by us: this site passes no profile to Adsterra and keeps Consent Mode advertising storage denied for Google. Adsterra may still personalise a creative from its own signals, so the opt-out links under Advertising apply. For the industry opt-out pages, use Adsterra's opt-out, Google Ads Settings, the DAA opt-out, and the NAI opt-out. A Do Not Track or Global Privacy Control signal is treated as Reject on this site, which keeps every ad script unloaded.

Policy changes are posted here with a revision date. Reading or continuing to use this site does not by itself grant consent to new advertising or analytics processing.

FAQ

Do you sell data?

No. We do not sell data and we run no user accounts. The vendors are Google Analytics 4, which runs with all four Consent Mode signals denied, Microsoft Clarity session recording, which is not requested unless you accept, and Adsterra, which serves the two ad placements and is only contacted after you accept. The only seller declared in ads.txt is Adsterra, publisher 3403020.

What about YouTube?

Pressing play connects to YouTube and related Google player, video, and image services. These can receive your IP and browser data. GPC or DNT rejection of site tracking is not a guarantee of anonymous playback.

ContactPrivacy email.TermsHow the guide may be used.

Sources

Google Privacy Policy — Provider policy for Google/YouTube processing; provider behavior may differ by region and account state.
Microsoft Privacy Statement — Provider policy for Microsoft Clarity session recording, which is created only after Accept.
Adsterra privacy policy and opt-out — Provider policy for the Native Banner (ad unit 31816525) and Social Bar (ad unit 31816526) placements, served from bicea.org only after Accept; also the personalised-advertising opt-out.
Cloudflare Privacy Policy — Provider policy for the Cloudflare Pages hosting and the Web Analytics beacon (static.cloudflareinsights.com) injected on every page.
Google Ads Settings — Personalized-ad controls. Google advertising storage stays denied on this site and no Google ad code is loaded; the ads here are Adsterra placements.
DAA opt-out — Industry opt-out page.
NAI opt-out — Industry opt-out page.