Privacy policy

Who is responsible

The operator of allstartowerdefense.org is the controller for the choice stored in your browser. Contact [email protected]. The games themselves are operated by Top Down Games on Roblox, under Roblox's own policy.

Third parties that can load

YouTube (Google). A video stays as a locally hosted picture until you accept cookies and press play. The player then connects to www.youtube-nocookie.com. YouTube may contact its own Google-operated asset, playback, measurement, or advertising services inside the player and may receive your IP address, browser/device information, referrer, and request time. It may use cookies or similar device storage, with retention governed by Google rather than the 180-day preference below. Privacy-enhanced mode is not a promise of no processing or no ads. Purpose: show a cited video. Legal basis: your consent. Google Privacy Policy and YouTube Terms. Google AdSense is not installed, and Adsterra (described in its own paragraph below) is the only advertising network. Withdrawing consent removes active players and prevents another load; it cannot recall requests already sent to YouTube.

Google Analytics 4 (Google), measurement ID G-KLS136E0YN. gtag.js loads from www.googletagmanager.com on every page, so Google receives the requested URL, your IP address, user agent, and referrer even before you choose. Consent Mode v2 starts with analytics_storage, ad_storage, ad_user_data, and ad_personalization all denied: Google Analytics writes no analytics cookie and reports only cookieless, aggregated pings. Press Accept and storage turns on, which lets the _ga cookies distinguish return visits. Purpose: count page views so thin guides can be found and rewritten. Legal basis: your consent. Cookie settings in the footer returns storage to denied for later hits; requests already sent cannot be recalled. Google Privacy Policy, how Google uses site information.

Microsoft Clarity (Microsoft), project ID yzigfz3gol. The loader at www.clarity.ms/tag/ starts on every page as soon as the HTML is parsed, before you accept or reject anything, so Microsoft receives the requested URL, your IP address, user agent, referrer, and the interaction data behind heatmaps and session replays: clicks, taps, scrolls, pointer movement, and page rendering timings. Clarity stores first-party cookies named _clck and _clsk and uses browser storage so the page views of one visit group into one recording. Text typed into form fields and other flagged content is masked by default and is not shown in the recording. Purpose: see which parts of a guide people cannot use, so thin pages can be rewritten rather than left alone. Legal basis: our legitimate interest in improving the site; you may object, or ask what was recorded and request deletion, at the contact address. Microsoft Privacy Statement.

Adsterra (Adsterra Network LP) serves the advertising on this site through its script host bicea.org. Two placements run: a Native Banner (ad unit 31793316) in the content column and a Social Bar (ad unit 31793317), the strip fixed at the bottom of the viewport. Neither script tag is in the HTML we send: both are created by page script only after you press Accept in the banner, so a visit that rejects, ignores the banner, or carries Global Privacy Control requests nothing from bicea.org and is served no ad. Once loaded, Adsterra receives your IP address, the page URL, referrer, user agent, and viewport size, and may set its own cookies on bicea.org or through creative served by its partners. Adult advertising is switched off at the Adsterra website level, and no popunder or interstitial format runs here. Purpose: pay for the guides. Legal basis: your consent. Rejecting in Cookie settings removes the placements and stops later page views from loading them. Adsterra Privacy Policy.

Hosting and contact messages

Deployment uses Cloudflare Pages. Hosting necessarily processes request information such as your IP address, requested URL, and browser headers to deliver and protect the site. Contact email uses Cloudflare Email Routing, forwarding messages to the operator's Google Gmail inbox. If you email us, those providers process the message and address to deliver the reply. Messages are kept only as needed to handle the request or meet applicable obligations; you may request deletion at the contact address. These email services are not browser scripts. Cloudflare Privacy Policy.

Storage keys

localStorage key astd_consent stores granted or denied, plus an expiry, for 180 days. localStorage key astd_tier_maker stores your private tier sort if you use the maker. localStorage key astd_ads_closed remembers that you closed the Adsterra Social Bar, so it stays closed on later page views instead of reappearing on every refresh; Accept clears it. The gtag.js consent default runs as a local function first; the Google Analytics cookies below are written only after you Accept. Clarity writes its two cookies on the first page view whatever you choose about Google Analytics, and its own settings page records which project the recording belongs to in browser storage. Adsterra sets no cookie until you Accept. After that its script runs inside this page, and the live check after the visitor accepted saw the Cloudflare bot-management cookie __cf_bm on bicea.org (30 minutes); Adsterra's own session and frequency-cap cookies, including the Social Bar's sb_main_… and sb_count_… pair keyed by unit 31793317, appear when a placement is actually filled. Adsterra owns those names and may change them, so its privacy policy stays the authoritative list.

Rights, ads settings, and signals

You can access, correct, or delete a request by emailing [email protected]. You can withdraw consent any time with Cookie settings in the footer. If navigator.globalPrivacyControl is true, the site stores a denial and does not treat a click on Accept as permission, and the Adsterra placements are not injected. Advertising only loads after you accept, and choosing Reject is what withdraws it. Adsterra's own data-subject routes are described at https://adsterra.com/privacy-policy/. Industry-wide interest-based advertising choices are collected at https://www.youronlinechoices.com/ and https://optout.aboutads.info/. Do Not Track is not a reliable signal in every browser; GPC is the signal this site honors. Ad preferences for services you use elsewhere: Google My Ad Center, Digital Advertising Alliance controls, and Network Advertising Initiative opt-out. These are external preference tools, not additional site vendors. This site serves contextual ads through Adsterra only, with adult advertising switched off. Policy changes are dated on this page and summarized in the lede when the vendor list changes.

Keep going

Sources

• Google Privacy Policy — Applies to Google Analytics and to a YouTube player you start.
• Microsoft Privacy Statement — Applies to Microsoft Clarity heatmaps and session recordings.
• Adsterra Privacy Policy — Applies to the two ad placements that load only after you accept.