Privacy · Last checked 2026-10-28
Privacy policy
This policy names the services observed in our browser audit, their storage purposes, and how to turn optional tracking off. Vendor delivery hosts can change.
I checked this policy against the tags in the layout and the units in the Adsterra panel on 28 October 2026. The measurement ID, the Clarity project and the ad unit ids below are the live ones; if a vendor renames a cookie or a key, this table is what I will update.
What loads on every page
The Clarity and Adsterra tags are not written into the HTML as script src elements. A first-party loader in the page creates them after the HTML is parsed, so they start with the first screen but do not block it. Google Analytics 4 is created by the first-party loader in the page head after it checks the stored choice.
GA4, Clarity and Adsterra are on for a first visit; Reject turns GA4, Clarity and both Adsterra units off. YouTube is the exception: it stays click-to-load, and a video frame is requested only when you press Play.
| Party | Purpose | When it loads |
|---|---|---|
| islandsreborn.com (this host) | Serves the guide pages, images and the consent record | Every request; the page renders without a third-party script |
| Google Analytics 4 — measurement ID G-TZM77F75DR | Counts page views and aggregate traffic sources | First paint, by default |
| Microsoft Clarity — project z4iysz7eyv (www.clarity.ms, scripts.clarity.ms and regional *.clarity.ms collection hosts) | Heatmaps and session recordings, with sensitive fields masked by Clarity | First paint, by default |
| Adsterra — Native Banner NativeBanner_1 (unit 31959492) and Social Bar SocialBar_1 (unit 31959493), publisher 3403020 | Serves the sponsored Native Banner in the page and the fixed Social Bar overlay | First paint, by default |
| YouTube (youtube-nocookie.com) | Plays a cited video | Only after you press Play on that video |
Cookies and local storage
The site itself sets no cookies. It writes the two localStorage keys above on islandsreborn.com. GA4 and Clarity may write first-party cookies on this site’s domain; third-party delivery hosts may also set their own cookies. These are vendor-documented or previously observed examples, not a guarantee that every listed name appears in every visit; their names and lifetimes are controlled by those vendors.
Adsterra's delivery host and creative CDNs rotate. Current requests reach bicea.org, static.nresystems.com, cdn.storageimagedisplay.com, cdn.show-sb.com, cdn.show-creative1.com, cdn.holdbitter.com and cdn.cloudpiko.com; the Social Bar notification may also request the Roboto font from fonts.googleapis.com and fonts.gstatic.com. Those hosts receive your IP address, user agent and the page you came from when the browser requests a creative or a notification file.
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
| ir_consent_v1 (localStorage) | islandsreborn.com | The banner record: choice, ads, analytics, reason, timestamp and expiry | 180 days |
| ir_adbar_closed_v1 (localStorage) | islandsreborn.com | Remembers that you closed the Adsterra Social Bar | 180 days |
| _ga | google-analytics.com | Distinguishes browsers for aggregate measurement | 2 years |
| _ga_TZM77F75DR | google-analytics.com | Keeps GA4 session state for this measurement ID | 2 years |
| _clck | clarity.ms | Clarity user identifier used to stitch a visit | 1 year |
| _clsk | clarity.ms | Clarity session identifier used for recordings and heatmaps | 1 day |
| CLID | clarity.ms | Microsoft Clarity identifier | 1 year |
| MUID | clarity.ms / microsoft.com | Microsoft user identifier used by Clarity | 1 year |
| pip_<32 hex characters> | bicea.org | Adsterra delivery and frequency control for the two units | 1 day or the browser session |
| __cf_bm | bicea.org | Cloudflare bot management on Adsterra's delivery host | 30 minutes |
| uid_id2, ak, acl | static.nresystems.com | Adsterra creative delivery and measurement | About 13 months for uid_id2; about 90 days for ak and acl |
| YouTube cookies such as YSC, PREF and VISITOR_INFO1_LIVE | youtube-nocookie.com / youtube.com | Playback, preferences and view measurement after you start a video | Set and controlled by Google; from the session to about 2 years |
Default on, and how to turn it off
On a first visit with no stored choice, the page writes ads: granted, updates Google Consent Mode v2 to granted, starts GA4, Clarity and both Adsterra units with the first paint, and shows the banner. The banner is a notice and a withdrawal control; it does not hold the scripts back while it waits for a click.
Reject overwrites the record with denied for 180 days. The page updates the consent signals, removes the advertising slots, and reloads to unload already-executed vendor code. On that reload and later visits, the head requests no GA4 loader and the body requests no Clarity or Adsterra scripts. Accept keeps the granted record; changing from Reject to Accept also reloads to restore the services. Cookie settings in the footer reopens the banner so you can change the choice at any time. When the 180-day record expires, the next visit is a new default-on visit.
If navigator.globalPrivacyControl is true, or Do Not Track is 1, the page treats the visit as Reject and does not show advertising or recording scripts. The Social Bar also has its own Hide ad bar button: closing it stores ir_adbar_closed_v1 for 180 days, so the bar does not come back on reload or on the next page.
The Adsterra units are sized and clipped locally. The native slot is constrained to the content width, the Social Bar is constrained to 100vw with overflow hidden, and the page reserves bottom padding while the bar is present.
Legal basis, retention and your choices
This site currently uses a default-on, opt-out design. A default record is a site setting, not evidence that you affirmatively consented. Reject and Cookie settings stop optional tracking as described above, and Global Privacy Control / Do Not Track are honoured. Privacy rights and applicable legal requirements depend on your location; this notice does not claim that the default-on design supplies opt-in consent where law requires it. Contact us with a privacy request.
Google Analytics 4 keeps event-level data for 2 months by default; the property can be set to retain it for up to 14 months. Microsoft Clarity keeps session recordings for 30 days and aggregated heatmap data for up to 13 months. Adsterra and YouTube keep data under their own policies and retention settings, which this site does not control.
You can object to or withdraw consent at any time, ask what the site holds, or ask for deletion by writing to [email protected]. The browser holds the two site preference records; analytics and recording data are also processed by the vendors named above. Deleting the preference record resets the choice to default-on; use Reject to preserve an opt-out. For personalised advertising, use Google Ads Settings, the industry opt-out at optout.aboutads.info, the NAI opt-out at optout.networkadvertising.org, or Adsterra's own privacy page. Those links are listed under Sources below; the choices are per browser and per vendor, and Reject on this site is the switch for this site.
Changes and contact
This policy changes when a tag or a storage key changes, and the date at the top moves with it. Questions go to the contact page or to [email protected].
/privacy-policy/, /cookie-policy/ and /cookies/ redirect here.
Questions
Does the site load analytics and ads before I click Accept?
Yes. GA4, Microsoft Clarity and both Adsterra units start with the first page view. The banner tells you and lets you withdraw; Reject turns them off for 180 days.
How do I change my choice?
Use Cookie settings in the footer, then Accept or Reject. The record is stored in localStorage under ir_consent_v1 for 180 days.
Do you use Google Analytics?
Yes. Google Analytics 4 measurement ID G-TZM77F75DR loads by default. Reject stores denied for 180 days and reloads; GA4, recording and ad scripts are then not requested.
What happens to the Social Bar when I close it?
The Hide ad bar button stores ir_adbar_closed_v1 for 180 days and removes the overlay, so it stays closed on reload and on later pages.
Keep going
Sources
- This site's pages and built HTML — checked 2026-10-28. Policy written against the scripts and units shipped with the site
- Google Analytics privacy policy — checked 2026-10-28. GA4 cookies and retention
- Microsoft Clarity privacy statement — checked 2026-10-28. Clarity recordings and heatmaps
- Adsterra privacy policy — checked 2026-10-28. Ad delivery, cookies and opt-out
- Google Ads Settings — checked 2026-10-28. Personalised advertising opt-out
- AboutAds opt-out — checked 2026-10-28. Industry opt-out for interest-based advertising
- NAI opt-out — checked 2026-10-28. Network Advertising Initiative opt-out
- YouTube embedded player — checked 2026-10-28. Click-to-load player used for cited videos