Privacy policy

What loads, when, and what it stores

This is a default-on site. A visitor with no stored choice is treated as granted: Google Analytics 4, Microsoft Clarity and Adsterra are requested on the first page view, without waiting for an Accept click. The banner still appears. It tells you what is running and gives you a Reject button. Reject turns those vendors off and is remembered for 180 days; Cookie settings in the footer reopens the choice at any time. Global Privacy Control or Do Not Track is treated as Reject.

The only first-party browser state is local storage. The key wcf_consent_v1 stores granted or denied plus a timestamp for 180 days. The key wcf_socialbar_closed stores that you closed the fixed Adsterra Social Bar, also for 180 days. The site sets no first-party cookie of its own. These two keys never leave your browser.

Advertising

Advertising is served by Adsterra (publisher account 3403020, website 6179383). Two placements run: a Native Banner (ad unit 32120076) inside the page and a Social Bar (ad unit 32120077) fixed at the bottom of the viewport. Neither vendor script is in the HTML we send: public/consent.js creates both on the first page view, unless a current Reject choice or browser privacy signal applies. Adsterra receives your IP address, page URL, referrer, user agent and viewport, and may set cookies or local storage on bicea.org and on creative hosts for frequency capping, fraud prevention and measurement. Adsterra controls its cookie names and lifetimes; these may change with the creative delivered.

Adult advertising is switched off for this website in the Adsterra dashboard. No popunder, banner or Smartlink format is created here. To limit personalised advertising elsewhere, use the Network Advertising Initiative (https://thenai.org/how-to-opt-out/), the Digital Advertising Alliance (https://optout.aboutads.info/) or the European Interactive Digital Advertising Alliance (https://www.youronlinechoices.com/). Google's own ad settings are at https://adssettings.google.com/. Those opt-outs do not remove ads; they limit personalisation. Adsterra's own handling is described at https://adsterra.com/privacy-policy/.

Analytics and session recording

Google Analytics 4 uses measurement ID G-LYJM3YTVJ7. The site-owned loader in the page head requests the Google tag only when a current Reject choice or browser privacy signal does not apply, and consent defaults put analytics_storage at granted from the first byte. On a fresh visit the three ad signals start denied and public/consent.js immediately updates them to granted; pressing Reject updates all four Consent Mode signals to denied and stops later page views from loading analytics. GA4 writes _ga and _ga_<container>, each for up to 2 years, and sends page-view data to Google.

Microsoft Clarity uses project z9931xgsbd. It loads on the first page view unless you press Reject, and writes _clck for 1 year and _clsk for 1 day while sending heatmap and session-replay data to clarity.ms. Clarity masks sensitive input by default. Reject stops new Clarity loads; the page reloads once after saving Reject so already-running vendor code stops.

The trailer is a facade. No YouTube iframe or Google media request exists until you press Play video; the player then contacts youtube-nocookie.com, youtube.com, ytimg.com and googlevideo.com and may set Google's own cookies. Cloudflare delivers the site and adds its own edge security and analytics processing; Cloudflare Email Routing sends mail to the mail-hub Worker for [email protected]. Mail you send is used to answer your request and is kept only as long as needed for that request and any legal obligation.

Legal basis, retention and your choices

This build uses default-on advertising, analytics and session recording. Its initial granted record reflects the site default rather than an affirmative visitor action. Accept or Reject records your preference. Storing wcf_consent_v1 and wcf_socialbar_closed is necessary to honour your choice. Delivering the pages, keeping the site secure and answering your email rest on the legitimate interest of operating the site (Article 6(1)(f)); correspondence also rests on taking steps at your request (Article 6(1)(b)). Where prior opt-in is required, this default-on setting does not provide that prior opt-in. We do not sell personal information.

Retention is specific: wcf_consent_v1 and wcf_socialbar_closed for 180 days; Adsterra's cookies on its own domains as its policy states, including the short-lived pip_<placement hash> identifier; _ga and _ga_<container> for up to 2 years; _clck for 1 year and _clsk for 1 day. Reject removes the ad units from the current page and sets all consent signals to denied. To request access, correction or deletion of correspondence, email [email protected]. You may also complain to your local data-protection authority. Policy changes are posted here with a new checked date.

Questions

Related

• Contact — Rights
• Editorial policy — Facts

Sources

Checked 2026-11-06. Each row below is a page I opened.

• Adsterra privacy policy
• Google privacy policy (Analytics and YouTube)
• Microsoft privacy statement (Clarity)
• NAI opt-out
• DAA opt-out
• Google ad settings