Privacy policy

What loads, and when

Google Analytics 4 (measurement ID G-P6LLLNPS3Z) loads by default from www.googletagmanager.com and sends measurement requests to Google Analytics, including www.google-analytics.com. Before config, analytics_storage defaults to granted; ad_storage, ad_user_data and ad_personalization default to denied, with ads_data_redaction enabled. Accept grants all four signals. A saved Reject, Global Privacy Control or Do Not Track denies all four before config and stops the loader, so googletagmanager.com is not requested on later page views.

Microsoft Clarity (project z327nmh9mi) loads by default unless you have rejected or send GPC/DNT. Requests go to www.clarity.ms, scripts.clarity.ms and regional collection subdomains of clarity.ms. Clarity records clicks, scrolling and page rendering. Sensitive inputs are masked by the provider. Reject stops the recording and prevents its loader on subsequent pages.

Adsterra (publisher 3403020) serves one Native Banner (unit 31910551) and one Social Bar (unit 31910552). Their snippet URLs are strings in a local loader; the initial HTML has no bicea.org script tag. On the first view, unless you have rejected, the loader creates both tags. The native banner sits in the page body. The Social Bar is the fixed bar at the bottom; it is capped to 100vw, the page reserves padding for it, and its Close ad button is remembered for 180 days.

Adsterra tags request bicea.org and may call additional advertising partners under Adsterra’s policy. YouTube references are external links: this site makes no YouTube requests and creates no video iframe. Clicking a video link leaves this site for YouTube. Fonts and original explanatory images are hosted here. Cloudflare serves the site and routes our email.

Cookies and localStorage keys

First-party storage we control:

• Title selections and rebirth/build-comparison inputs stay in page memory and reset on navigation or reload. No game account, API access or saved browser profile is required. The comparison tool does not upload your test data. The site-wide recording and analytics policy still applies; Reject optional recording before entering information you do not want recorded. Copy code writes the selected public code string to your clipboard only after you press its button; it does not read your clipboard.
• localStorage sf.consent.v1 — JSON with choice (granted or denied), ads, analytics, savedAt and expiresAt. Written when you press Accept or Reject, or when GPC/DNT is detected. Retention: 180 days. With no saved choice the recording and advertising loaders run by default while the banner stays available. This preference record stays in your browser.
• localStorage sf.adbar.closed — JSON with closed (true) and ts (milliseconds), written only when you press Close ad on the Social Bar. Retention: 180 days. It keeps that bar closed on later page views.
• First-party GA4 cookies: _ga (random client ID, 2 years) and _ga_P6LLLNPS3Z (session state, 2 years). They are set on steelfighters.org and read by Google Analytics. Reject does not delete cookies already written; clear them in your browser or block googletagmanager.com.
• Microsoft documents first-party _clck (1 year) and _clsk (1 day) cookies on the visited site, and provider cookies such as CLID, MUID and ANONCHK on Microsoft domains. Actual cookies depend on browser restrictions and provider consent handling. See the linked Clarity cookie documentation for current names, domains and durations.
• Adsterra cookies and localStorage on bicea.org and on the demand partners it calls. The names and lifetimes are set by those providers for frequency capping, fraud prevention and, where permitted, personalised advertising. We cannot enumerate them from this site and do not pretend to.
• If you follow a video source link, YouTube handles data on its own site under its own privacy policy. No YouTube storage is requested by this site.
• Cloudflare may set a security cookie for bot protection when it serves a request. It is a hosting cookie, not an advertising one.

Advertising, personalisation and opt-out

Adsterra is the only advertising network on this site. Adult and erotic ad categories are switched off in the publisher panel, and we do not run AdSense, Popunder, Banner or Smartlink units. The native banner and the Social Bar load by default; pressing Reject removes their tags and hides the bar on this page, and the denial is remembered for 180 days.

Adsterra and its demand partners may personalise ads using their own signals. Use Cookie settings in the footer and press Reject to stop this site’s advertising loaders. Browser controls can also block bicea.org. See the Adsterra privacy policy for provider rights requests and partner details. This site’s Google advertising-storage settings do not control Adsterra.

Analytics, recording and retention

GA4 reports page views, sessions, approximate location, device and referral data. We use it to understand readership. Google’s property settings govern user-level and event-level retention; standard aggregate reports follow separate provider rules. We do not promise an unverified 14-month limit for all data.

Clarity reports heatmaps and session recordings to Microsoft. Inputs are masked by default and we do not record passwords or payment fields. Retention is configured in the Clarity project and described in Microsoft’s privacy statement. Clarity is a session-replay tool, so treat a recorded session as potentially identifying even when text is masked.

Adsterra and its partners keep request logs and advertising identifiers under their own policies. We do not receive a copy of those logs. Our own consent and bar-close records expire after 180 days and are never sent to our server. See the Google privacy policy, the Microsoft privacy statement and Clarity cookies for the provider-side details.

Legal basis and your choices

This site uses an opt-out configuration: recording and advertising scripts load before a banner choice unless GPC/DNT or a saved Reject applies. Automatic loading is not a record of affirmative consent. Reject is remembered for 180 days and reloads this page. Processing that happened before that choice cannot be undone by the button.

You can block googletagmanager.com in your browser to block the Google tag completely. Serving pages, security and answering your email also involve processing request or correspondence data. Contact us with privacy questions or rights requests under the law applicable to you.

You can ask for access, correction or deletion of correspondence you sent us. You can also delete the two localStorage keys yourself, clear cookies for this site, or use Cookie settings in the footer to reopen the banner and change your choice.

Contact and changes

This policy covers steelfighters.org. Write to [email protected]. Cloudflare Email Routing sends mail for that address to our mail-hub Worker and mailbox. Cloudflare and our mailbox service process the message for delivery and reply. We keep correspondence as needed to handle it and do not sell it.

This text was updated on 2026-10-25, when GA4, Clarity and the two Adsterra units were added. A material change will bump that date here and in the changelog. Cookie aliases /cookies/, /cookie-policy/ and /privacy-policy/ redirect to this page.