Yes. Adsterra serves a native banner inside the page and a floating Social Bar, and both load on the first view together with Google Analytics 4 and Microsoft Clarity. Adult ads are switched off in the Adsterra account, and there is no popunder. The banner is a notice with Accept and Reject, not a gate.

How do I withdraw the consent record?

Use Cookie settings in the footer, then Reject. That writes ad_storage, ad_user_data, ad_personalization and analytics_storage as denied in beyrivals-consent for 180 days, removes the Clarity and Adsterra scripts, disables Google Analytics for this browser, and reloads the page without them.

Which keys does the site itself write?

beyrivals-consent (your choice, 180 days) and beyrivals-social-closed (the floating Adsterra bar was closed, 180 days). Both are first-party localStorage entries; this site has no endpoint that uploads them.

Privacy Policy — beyrivals.org

This policy matches the scripts on beyrivals.org as of 2026-10-27. The contact for privacy requests is [email protected].

What the pages load

On a first visit with no saved choice, the page loads these four things immediately: Google Analytics 4 (measurement ID G-2QGYZB3BGJ), Microsoft Clarity (project z4340e53df), Adsterra Native Banner (unit 31944292, NativeBanner_1) and Adsterra Social Bar (unit 31944293, SocialBar_1). The Adsterra scripts start at bicea.org. Nothing waits for Accept: the notice appears after the tags start.

Google Analytics 4 measures page views and interactions. Its requests go to www.googletagmanager.com and www.google-analytics.com; identifiers can include the cookies _ga and _ga_<container>.
Microsoft Clarity records page views, clicks, scrolls and session replay. Its requests go to www.clarity.ms, scripts.clarity.ms and regional clarity.ms collection subdomains; identifiers can include _clck, _clsk, CLID and MUID.
Adsterra and its demand partners may store advertising identifiers and frequency caps. The scripts start at bicea.org and can request delivery hosts such as static.nresystems.com, cdn.show-creative1.com, cdn.show-sb.com and cdn.cloudpiko.com. Campaign hosts can change; the site loads whatever the network returns for these two units.
A YouTube video stays a local image until you press Play. The iframe then requests www.youtube-nocookie.com, YouTube’s embed host, and can set its own cookies from that point. No YouTube request happens before the click.
Outbound links to Roblox, Discord, Google Play and Fandom are ordinary links. Those sites only see you if you follow them. No other third-party script, tag manager, popunder or traffic-exchange SDK runs on this site.

Default loading, Accept and Reject

The four integrations above load by default. Before GA4 config, Consent Mode v2 defaults ad_storage, ad_user_data and ad_personalization to denied, analytics_storage to granted, and ads_data_redaction to true. Default vendor loading is separate from these Google signals; only an explicit Accept updates the advertising signals to granted. The cookie banner is a notice and a withdrawal control, not a gate: it never blocks the page and the page never waits for Accept. Pressing Accept writes a granted choice and keeps everything on. Pressing Reject writes a denied choice, sets the three advertising signals and analytics_storage to denied through Google Consent Mode, stops the Clarity and Adsterra requests on the next load, disables Google Analytics for this browser, and remembers the refusal for 180 days. The footer link Cookie settings reopens the notice so you can change your mind. If your browser sends Global Privacy Control or Do Not Track, the site treats that as Reject without showing the banner first.

Storage

Key	Where	Purpose	Retention
beyrivals-consent	localStorage	Your consent choice, ad signal values, analytics_storage, timestamps	180 days
beyrivals-social-closed	localStorage	The floating Adsterra Social Bar was closed	180 days
_ga, _ga_<container>	cookie (Google)	Distinguish browsers for Google Analytics 4 measurement	Up to 2 years (Google default)
_clck, _clsk, CLID, MUID	cookie (Microsoft)	Clarity session identity, replay and consent state	Up to 1 year; _clsk is short-lived
Adsterra campaign identifiers	cookie / localStorage (Adsterra)	Frequency capping and ad delivery; names depend on the campaign	Set by the delivered campaign

The site stores its own settings in localStorage, not a first-party settings cookie. On an unanswered first visit it does not save an Accept choice; the notice remains available on later pages. beyrivals-consent is JSON: choice, ad_storage, ad_user_data, ad_personalization, analytics_storage, ts, expires. Both first-party keys are read as expired after 180 days and can be deleted in your browser settings; deleting them makes the next visit use the default loading behaviour again. Vendor cookies are controlled by the providers, not by this site.

Advertising and opt-outs

The Adsterra units on this site are display and native placements; no popunder unit is configured, and adult-category advertising is disabled in the saved Adsterra configuration. Creative delivery is controlled by the network; report unwanted ads to the contact address. Adsterra and its demand partners may personalize ads. You can opt out of personalized advertising at Google Ads Settings, the Digital Advertising Alliance, or Your Online Choices. Adsterra explains its own data use in its privacy policy. For Google Analytics, the browser add-on at tools.google.com/dlpage/gaoptout blocks measurement on every site that uses it. Reject prevents this site from starting the advertising and recording scripts on later loads.

Legal basis, retention and rights

An unanswered notice is not an affirmative consent action. As described above, these vendors start by default unless you Reject or send GPC/DNT; this policy does not claim that displaying a notice obtains consent. Accept and Reject save your express preference, and the site uses that record only to apply the preference. Retention: the two first-party localStorage keys expire after 180 days; vendor data follows each provider’s retention policy and project settings. Reading the pages does not require an account. You can ask for a copy of any message you sent us, a correction, or deletion, by email. You can also erase the localStorage keys in your browser without writing to us. We do not sell personal information. Reject stops future automatic vendor loading after the page reloads; it does not erase data already received or every vendor cookie already set.

Changes to this policy show a new date under the heading. The date on this version is 2026-10-27. When a third party is added or removed, its name, hosts, keys and purpose are updated here in the same change.

Operator, infrastructure and correspondence

The operator is the independent beyrivals.org editorial team, [email protected], not BBR Productions. When this static site is served through Cloudflare, its infrastructure receives ordinary request information such as IP address, URL and user agent for delivery and security. Email to the contact address is routed by Cloudflare to our mail-hub Worker; its content and sender details are processed to handle the request. No fixed automatic deletion period for correspondence has been verified; ask the contact address for access or deletion. Do not send passwords, Roblox cookies, payment details or sensitive personal information.

Audience and international processing

This is a public fan reference, not an account service or an age-verification service. No account or personal profile is required to read it. Children should not send personal details in corrections; a parent or guardian may contact the operator about a message or request deletion. Analytics, recording and advertising operate as disclosed above unless disabled. Providers may process data outside your country under their own policies. This notice describes the implementation; it is not a guarantee that default loading meets every jurisdiction’s prior-consent requirements.

Privacy Policy