Build reviewed 17 October 2026 · optional storage stays off until Allow
Privacy policy
This policy describes the website build edited on 2026-10-17 and serving live at https://animeballduels.net. Contact: contact@animeballduels.net. This build has no user account system. Game-source snapshot dates are separate from this policy’s edit date.
What loads, and why
| Name | When | Purpose | Keys |
|---|---|---|---|
| This site / serving origin | Every page | Serve HTML, fonts, images, and scripts | No account cookie is set by the reviewed application code. |
| localStorage abd_consent_v2 | After you choose, if storage is available | Remember the one optional-storage choice, which covers the ad units, the session recording, analytics storage, and the video permission | JSON {choice, ts}, where choice is "granted" or "denied". Reused for up to 180 days. Read in your browser and never transmitted. The earlier abd_consent_v1 key only asked about video, so this build deletes it instead of reusing it as ad consent. |
| localStorage abd_ads_closed | Only if you close the floating ad strip | Keep that strip closed on later page views, not just until the next refresh | The string "1". Removed when you press Allow again. No other key is written by the ad loader. |
| www.googletagmanager.com | Every page, as the page loads | Deliver the Google Analytics 4 tag (measurement ID G-XJD4J2GBB7) | Request sent before you make any choice. No identifier is sent with the request itself. |
| static.cloudflareinsights.com | Every page, as the page loads | Cloudflare Web Analytics beacon for this zone. It is injected by Cloudflare’s own edge, not by this site’s build: neither the repository nor the built files reference it. | No cookie belonging to it appeared in the tested browser. Cloudflare presents this product as cookieless and says it does not fingerprint visitors; that is the provider’s description, and the review could only confirm that no cookie from it was observed. |
| www.google-analytics.com | Every page; measurement follows your choice | Google Analytics 4 measurement pings | Before Allow the tag runs cookieless: requests carry the denied consent state with advertising data redaction, so no stable identifier is sent and no new analytics cookie is set. After Allow Google Analytics 4 may set its own first-party _ga and _ga_XJD4J2GBB7 cookies, whose lifetime follows that tag’s configured retention, and pings carry a client id. |
| bicea.org (Adsterra ad script host) | Only after Allow. Never for a visitor who refuses, and never for one who does not answer. | Deliver the Adsterra Native Banner (ad unit 31768783) and Social Bar (ad unit 31768784) for the Adsterra website record animeballduels.net (website id 6128090). The Native Banner renders below the article content; the Social Bar is a strip fixed to the bottom of the viewport. | Adsterra receives the page address, your IP address, device and browser details, and your interaction with the units. In the tested browser each unit set a cookie on bicea.org whose name is pip_ followed by a 32-character unit hash — two of them, one per unit, not HttpOnly, and both expiring inside a day, which is the cap Chrome applies to third-party cookies — alongside Cloudflare’s own __cf_bm challenge cookie on the same host. "Show adult ads" is off for this website in the publisher dashboard, so no adult-creative feed is requested. Both invoker scripts are absent from the served HTML: their bicea.org addresses appear there as strings only, and no request to that host is made before Allow. |
| www.clarity.ms, scripts.clarity.ms, and the upload host (f.clarity.ms, e.clarity.ms live) | Only after Allow, and not at all for a visitor who refuses or never answers | Deliver the Microsoft Clarity tag (project id yyql8jzr1o), the session-replay SDK (scripts.clarity.ms/0.8.72/clarity.js in both tests; the version changes), and the recording uploads | First-party cookies _clck and _clsk are set on this site’s own origin while the recording runs. Refusal, and withdrawal of an earlier Allow, removes the script tags and requests deletion of both cookies; uploads already sent cannot be recalled. A third-party CLID cookie on www.clarity.ms was also present in the browser used for this review — this build neither reads nor sets it, and this policy does not claim that visiting this site is what created it. |
| www.youtube-nocookie.com | After Allow and a play click, unless GPC or DNT denies it | YouTube player, subtitles, playback events and logs | Network requests observed; privacy-enhanced mode is not a promise of no data collection. |
| googlevideo.com subdomains | During permitted YouTube playback | Video and audio delivery | Observed host: rr2---sn-u2buxaxjvh-npol.googlevideo.com. The media host may change. |
| i.ytimg.com and yt3.ggpht.com | When the permitted player loads | Video thumbnails and channel images | Requests observed inside the player; the website’s own poster images are local. |
| fonts.gstatic.com | When the permitted player loads | Fonts inside the YouTube player | The website’s own fonts are local, not Google Fonts requests. |
| www.google.com and jnn-pa.googleapis.com | When the permitted player loads | Supporting script and interface requests made by YouTube | Observed inside the embedded player, not a separate site analytics integration. |
Consent, GPC, and Do Not Track
Four storage types start denied on every page load: ad_storage, ad_user_data, ad_personalization, and analytics_storage, with ads_data_redaction on. Allow is the only thing that flips them to granted, and it is also what creates the Adsterra invoker scripts and the Microsoft Clarity tag, so a visitor who refuses — or who never answers, which is the default — leaves bicea.org and clarity.ms unrequested. Google Analytics 4 and the hosting provider’s own Web Analytics beacon are the two third-party scripts that arrive with the page before any choice; the Google tag stays cookieless while analytics_storage is denied, and the host’s beacon is outside this consent queue.
Allow also permits the optional YouTube player, which still needs a play click before it loads. Refuse removes already loaded ad scripts, the Clarity tag, and video iframes from the page you are on. Removal stops those scripts locally but cannot undo requests already sent.
Global Privacy Control or Do Not Track set to 1 keeps every optional storage type denied and the player closed, even where an earlier Allow is stored in the browser. Cookie settings in the footer reopens the choice, and your browser’s site-specific data controls can remove the stored record.
Adsterra is the only advertising network on this site: no AdSense tag and no second banner network ships on these pages. The one seller authorised to sell this domain’s inventory is declared in /ads.txt as adsterra.com, 3403020, DIRECT — that is the publisher id the Adsterra dashboard reports for this account, read from the dashboard rather than guessed, and no other seller line is published. Personalised-advertising controls for the accounts involved: https://adssettings.google.com/, https://www.youronlinechoices.com/, and https://optout.networkadvertising.org/. Those are links, not scripts; following them loads nothing from this site.
YouTube/Google can receive request metadata and playback information after permission. Observed requests included playback statistics and log endpoints. The site’s denied Google consent queue does not prevent processing inside a separately permitted third-party player.
The tested YouTube origin exposed storage keys yt-player-bandwidth, yt-player-caption-persistence, ytidb::LAST_RESULT_ENTRY_KEY, and yt-icons-last-purged. These are observations of an existing browser origin, not proof they were all created on this visit. No document.cookie names were visible in this playback test; that is not a guarantee about other sessions. Refusal does not erase third-party storage or data already sent.
Hosting, retention, and questions
Cloudflare Pages serves this build, and the published HTML and ad configuration described above were checked live on 17 October 2026. Cloudflare also injects its own Web Analytics beacon into pages served from this zone (static.cloudflareinsights.com); that script belongs to the host, not to this build, it is not gated by the choice above, and it is the only third-party script here besides Google Analytics 4 that runs before you choose. Cloudflare’s own request logging for those files, and its retention settings, have not been audited in this review, so this page does not claim what the platform keeps or for how long.
The choice is accepted for up to 180 days from its timestamp. Expiry makes the application ignore it; it does not necessarily delete the stored key. The key may remain until replaced or removed through site-data controls.
Email contact@animeballduels.net for privacy questions or correction requests. Cloudflare Email Routing forwards this address to a Gmail mailbox, so Cloudflare and Google process messages you choose to send. The routing configuration was checked on 17 October; mailbox retention has not been audited. Email does not load these services in your browser on this site. Do not send passwords, session cookies, payment details, or unredacted account screenshots.
Questions
Does Allow turn on advertising?
Yes. Allow creates the two Adsterra invoker scripts, which is what requests the Native Banner and the fixed Social Bar from bicea.org, and it releases the four analytics and advertising storage types. Refuse, the default for a visitor who never answers, leaves those scripts uncreated, so no request reaches the ad host.
How do I change my mind?
Use Cookie settings in the footer and choose Refuse, or delete the localStorage keys abd_consent_v2 and abd_ads_closed. Refusing removes the Adsterra scripts, the Clarity tag and the recording cookies from the page you are on; data already sent cannot be recalled.
Is a session recording made without my consent?
No. Microsoft Clarity, project id yyql8jzr1o, is injected only after Allow, so the served HTML contains no clarity.ms script tag. Once allowed, it sets the first-party cookies _clck and _clsk and records the session until you leave the page or withdraw the choice.
Sources and snapshot dates
- Adsterra privacy policy - Provider policy for the ad units this site loads after Allow; the link does not load an ad.
- Google / YouTube privacy policy - Provider policy for the optional player and for the Google Analytics 4 tag; links do not load the player or grant permission.
- Microsoft privacy statement - Provider policy for Microsoft Clarity, including the session recording this build loads after Allow; the link does not load Clarity.
- Google ad settings - Personalised-advertising controls, offered as a link only.
- Your Online Choices - Industry opt-out page for interest-based advertising, offered as a link only.
- Network Advertising Initiative opt-out - Industry opt-out page for interest-based advertising, offered as a link only.
- Contact for this website - Published editorial and privacy contact. Hosting and mailbox retention are not established by this build review.