Privacy policy

What loads and how to change it

On an ordinary first visit with no saved choice, the page requests GA4, Clarity and Adsterra. The banner remains visible until you choose. The Google consent defaults initially deny ad storage, ad user data and ad personalization while allowing analytics storage; page boot then applies the default-on state. This describes the technical behavior and does not mean that visiting is an affirmative consent choice.

Reject saves a denied choice and reloads the page to stop running vendor code. With a valid denied choice, GA4 is not loaded in the page head, and the integration loader does not start Clarity or Adsterra. Accept saves a granted choice and reloads to start them. Both choices are remembered for 180 days. An expired choice is treated as unset, so the default loading behavior and banner return.

Global Privacy Control (navigator.globalPrivacyControl) is treated as rejection. Cookie settings in the footer reopens the banner. Reject does not recall information already sent or guarantee deletion of existing vendor cookies; browser controls can remove site cookies and storage. The site does not use Do Not Track as an additional preference signal.

Requests observed in the browser audit

On the default first visit, the browser audit observed the following third-party hosts. Requesting these hosts discloses connection information such as IP address and browser headers; the exact payload depends on the vendor request. These observations describe one audit session, not a complete list of every future advertising partner.

Google Analytics: www.googletagmanager.com loads the Google tag and www.google-analytics.com receives analytics requests.

Microsoft Clarity: www.clarity.ms and scripts.clarity.ms load Clarity resources. Dynamic collection requests also use *.clarity.ms, including changing letter-based subdomains observed during the audit.

Adsterra and advertising downstream resources observed: bicea.org, static.nresystems.com, cdn.storageimagedisplay.com, cdn.show-sb.com, cdn.show-creative1.com and cdn.cloudpiko.com. They served advertising scripts, delivery resources or creative assets in that session. cdn.storageimagedisplay.com was observed serving creative images. A request alone does not establish a specific cookie name or retention period.

Reject, or GPC, prevents this site from starting these analytics, recording and advertising integrations after the reload. Creative suppliers and domains can change with the advertisement served.

Cookies and local storage

The absence of a Set-Cookie response from the static site does not mean there are no first-party cookies. Scripts such as GA4 and Clarity can set cookies on villageintheshade.org. Google documents _ga and _ga_<container-id>; Clarity documents first-party _clck and _clsk and other service cookies. Browser controls, consent state and vendor changes affect which are actually present.

Google lists a default two-year expiry for its GA4 cookies, subject to configuration and browser limits: https://developers.google.com/analytics/devguides/collection/ga4/cookie-usage . Microsoft explains its cookie names and purposes at https://learn.microsoft.com/en-us/clarity/setup-and-installation/clarity-cookies . A cookie expiry is not the same as server-side data retention.

The site stores vis-consent with the choice and timestamp, valid for 180 days. It also stores vis-socialbar-closed when the site-provided Social Bar close control is used; that flag remains until site storage is cleared. Closing a bar is not the same as rejecting all advertising. Local storage can be removed using your browser’s controls for this site.

Google Analytics 4

GA4 uses Measurement ID G-3R46FY7DPK for traffic analytics. Google describes measurement of page interactions, device and browser information and approximate location. Which optional measurement features are enabled depends on the property configuration; this policy does not claim that every available event is recorded.

Google’s retention control applies to user-level and event-level data. Its documentation expressly says that this setting does not affect standard aggregated reports. The current property retention setting was not independently checked in this audit, so no two-month, fourteen-month or aggregate-report deletion promise is made here. See https://support.google.com/analytics/answer/7667196?hl=en .

Reject reloads the page and prevents this site loading GA4 while the rejection remains valid. Google’s privacy policy is https://policies.google.com/privacy and its Analytics opt-out add-on is https://tools.google.com/dlpage/gaoptout .

Microsoft Clarity

Clarity project z4lpyv0fc7 provides session recordings and heatmaps of interactions such as clicks and scrolling. Sensitive-content handling depends on Clarity masking and project settings. Avoid placing passwords, payment details or other sensitive information in messages to this guide.

The English Microsoft retention documentation read on October 28, 2026 states 30 days for ordinary playback data, 9 months for labeled or favorited sessions, and 9 months for heatmaps and click data. These are vendor policy periods, not a separate site guarantee: https://learn.microsoft.com/en-us/clarity/setup-and-installation/data-retention . The heatmap feature page also states up to 9 months: https://learn.microsoft.com/en-us/clarity/heatmaps/heatmaps-features .

Reject or GPC prevents the site starting Clarity after the reload. Microsoft’s broader privacy statement is https://privacy.microsoft.com/privacystatement .

Adsterra advertising

Adsterra serves the Native Banner and Social Bar through this site’s advertising configuration. Advertising delivery can process device, network and page-context information and use cookies or related identifiers. The observed downstream hosts are listed above; other creatives may use different resources.

This audit did not establish a complete ad-cookie inventory or fixed expiry for this publisher integration. No pip_* cookie, __cf_bm cookie, universal thirty-day period or claim that all ads are non-personalized is asserted here. Refer to Adsterra’s own privacy and cookie policies: https://adsterra.com/privacy-policy/ and https://adsterra.com/cookies/ . Its retention terms vary by processing purpose and applicable obligations.

Reject reloads the page and prevents this site from starting Adsterra while the rejection is valid. Closing the Social Bar by itself affects that bar’s display and does not switch off the other integrations.

YouTube and Cloudflare

Video embeds use a click-to-play facade with a local preview. The browser audit observed no YouTube request on the first visit. Pressing play loads the external YouTube player, which may then process data under https://policies.google.com/privacy . The site’s analytics and ad rejection does not prevent a player that you explicitly choose to load.

Cloudflare provides site delivery, DNS and inbound email handling. It may process request and security information under https://www.cloudflare.com/privacypolicy/ . This policy does not claim that a particular Cloudflare security cookie is present unless it has been observed.

Contact email and privacy requests

Messages to [email protected] are configured to pass through Cloudflare Email Routing to the mail-hub Worker, then into the operator’s mail hub, with a mirrored copy in Gmail. Cloudflare documents Email Workers at https://developers.cloudflare.com/email-routing/email-workers/ ; Google’s policy at https://policies.google.com/privacy applies to Google’s handling. This describes the configured route, not a claim that a real send-and-receive test has passed.

Your sender address, message headers, body and any attachments may be processed and stored along that route so the operators can handle corrections, copyright reports and privacy requests. Mail hub records and mirrored Gmail copies may need separate handling when a message is removed. No automatic deletion schedule or delivery-response time has been verified, so no fixed retention or response promise is made.

Send only information needed for the request. You may request access, correction or deletion of correspondence through that address. The operators may need sufficient information to identify the relevant message. Use local browser controls for cookies or localStorage; email cannot directly clear storage on your device. You may also contact the appropriate data-protection authority.