Cork7 Guide privacy policy
Checked against the built pages · 25 October 2026
This policy describes cork7.org, the guide. It does not describe the game at cork7.com, which has its own privacy page. Controller for the guide: the cork7.org editors, reachable at [email protected].
I read the built pages before publishing this text, so every service named here is one the site actually requests. Three load on the first view. Candidate videos are outbound links, not embedded players.
What loads, and when
These pages are static HTML, CSS, images and self-hosted font files. They also load three third-party services, named one by one below: Google Analytics 4, Microsoft Clarity and Adsterra. There is no AdSense, no Meta pixel, no TikTok pixel, no traffic-mesh banner SDK and no Cloudflare Insights script on this site. ads.txt declares one seller, Adsterra, because that is the only ad network the pages load.
Default load: if you have no stored choice and your browser does not send Global Privacy Control, the site records granted and requests GA4, Clarity and Adsterra on the first view. The cookie banner still appears so you can withdraw. Pressing Reject writes a denied record, turns the advertising and analytics signals off, removes the Adsterra scripts and the floating bar, asks Clarity to stop, disables the GA4 tag, and reloads the page to discard vendor code that already ran. That record lasts 180 days. Pressing Accept is only needed after a rejection.
If navigator.globalPrivacyControl is true, or Do Not Track reports 1, the site records denied before any third-party script is requested and does not show the banner. There is no gate that waits for Accept before loading these scripts: the banner is notice and withdrawal, not a permission dialog. Cookie settings in the footer reopens the banner at any time.
The default-on setting is not affirmative consent: the initial granted record describes this site’s loading preference, not a click on Accept. Reject withdraws it. We rely on legitimate interests for the static delivery of the pages and for answering correspondence. Where local law requires prior opt-in for non-essential tracking, this default-on setting must not be represented as meeting that requirement.
Google Analytics 4
Property: website_179_gameinfo_cork7.org, Measurement ID G-S5VNPMXSSG. GA4 is loaded by the gtag.js snippet on www.googletagmanager.com and runs from the first view. It sends page views and basic interaction events to Google. The hosts it contacts are www.googletagmanager.com and www.google-analytics.com. The tag runs after a Consent Mode v2 default block in the page head: analytics_storage starts granted and the three advertising signals start denied, then the default-on path grants the ad signals and Reject denies all four.
Cookies: _ga (up to 2 years) and _ga_S5VNPMXSSG (up to 2 years) distinguish browsers and sessions. This site stores no GA identifier in localStorage. Cookie lifetime is controlled by Google. This site does not send your contact email in GA4 events. You can opt out with the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout or by pressing Reject. Google’s privacy policy is at policies.google.com/privacy.
Microsoft Clarity
Project: z32qi11p3t. Clarity records pseudonymous sessions (mouse movement, clicks, scroll depth and page timing) and builds heatmaps so layout problems can be found. Form inputs and other sensitive content are masked by Clarity’s default masking. The site loader creates the tag from https://www.clarity.ms/tag/z32qi11p3t on the first view. Requests also go to scripts.clarity.ms and to regional collection hosts such as a.clarity.ms through z.clarity.ms. The served HTML contains no Clarity script tag, only the URL string in the loader.
Cookies and storage: _clck identifies a browser across sessions; _clsk groups a visit into one recording. Microsoft also documents the vendor-domain cookies CLID, ANONCHK, MR, MUID and SM; these support identifiers, synchronisation and Microsoft advertising preferences. Whether they are set depends on browser settings and the vendor response. See the Microsoft cookie inventory. Microsoft documents 30 days for normal playback data, and 9 months for labeled or favorited sessions, heatmaps and click data. We do not connect recordings to an email address. Pressing Reject sends denied through the consentv2 API, stops Clarity and reloads into a document that requests no tracking scripts. Microsoft’s retention documentation and privacy statement apply.
Adsterra advertising
Network: Adsterra, publisher 3403020, website 6148817. Two units are placed: NativeBanner_1 (unit 31910936), an in-feed widget, and SocialBar_1 (unit 31910937), the floating bar at the bottom of the page. Adult ads are switched off in the Adsterra panel. We do not run Popunder, Banner or Smartlink units, and no other ad network is present on this site.
The units are created by the site loader from https://bicea.org/… on the first view; the served HTML contains no ad script tag. Adsterra and the placement host bicea.org set their own cookies and localStorage entries on their domains for frequency capping, fraud prevention, measurement and click attribution. We do not set those vendor cookies from cork7.org, and their names can change; the authoritative list is Adsterra’s privacy policy at adsterra.com/privacy-policy.
This site stores one local key for the floating bar: cork7_socialbar_closed, a timestamp kept for 180 days so a bar you hid does not return on the next page view. It contains no identifier. The bar is capped to the viewport width (max-width:100vw, box-sizing:border-box, overflow:hidden), the page reserves bottom padding while it is open, and the Hide ad bar button removes it.
Personalised advertising: Adsterra may use cookie data to choose creatives. Reject or Cookie settings turns this site’s loaders off. Provider preference tools include Google Ads Settings and Your Online Choices; coverage depends on the participating provider. Those external tools are not a substitute for Reject and do not necessarily stop advertising requests.
Consent record and how to withdraw
Key cork7_consent in localStorage. Value: JSON with choice (granted or denied), exp (milliseconds) and v. Kept for 180 days, then treated as missing. Purpose: remember whether you rejected advertising and analytics. Legal basis: our legitimate interest in not asking on every page, and in honouring a refusal. You can delete the key in your browser, or reopen the banner with Cookie settings.
When a record is missing and GPC is off, the page runs the accept path: it writes granted, loads the three services, and shows the banner. Accept leaves that record. Reject writes denied, updates the four consent signals to denied, removes the Clarity and Adsterra scripts and the floating bar, disables the GA4 tag, and reloads into a tracking-free document. A saved Reject prevents all three loaders on later page visits until it expires or you Accept. After 180 days the record expires and the banner offers the choice again.
YouTube and outbound links
The published pages contain no YouTube iframe or externally loaded YouTube thumbnail. Candidate videos are ordinary links to youtube.com, not embedded players or verified tutorials. Following a link opens that third-party site under Google’s privacy policy. It is not a default third-party request from this guide.
Links to cork7.com, the App Store or a source list are ordinary links: the destination sets its own cookies under its own policy when you follow one. We do not see them.
Email and your rights
If you email [email protected], we use the message and its headers to reply. Cloudflare Email Routing delivers incoming mail to our mail-hub Worker and mailbox service; it is not a form submission or a request to a third-party script in your browser. Basis: the request you sent, plus our legitimate interest in keeping a record of the answer. We do not add you to a marketing list and we do not sell personal information.
You can ask for a copy, a correction, or deletion of email we still hold, and you can object to the advertising and analytics described above. Write to [email protected]. You may also lodge a complaint with your local data-protection authority. The game’s App Store listing is rated 13+. This guide is not directed at children, and we do not knowingly collect their data.
Changes
If we add another analytics ID, ad unit, or session-replay project, this page will name the provider, the purpose, the cookie or storage keys, the retention, and the legal basis before or when the script ships. The date on this page moves with the rest of the site. Cookie settings in the footer reopens the banner.
FAQ
Does cork7.org load ads and analytics before I click Accept?
Yes. GA4, Microsoft Clarity and Adsterra load on the first view. The banner tells you and lets you withdraw; Reject turns all three off for 180 days.
Which cookies does the site set itself?
Only localStorage: cork7_consent for your choice and cork7_socialbar_closed for a hidden floating bar. The cookies named above belong to Google, Microsoft and Adsterra.
Who do I email about my data?
[email protected]. That is a working address for this guide.
Sources and references
Publisher links describe the game, not this independent guide's policies. Store listings and community information can change.