Privacy Policy

Who is responsible

The operator of underkeep.org, contacted at [email protected]. That address handles privacy requests, corrections and takedown questions about screenshots.

What loads by default

The pages load four third parties. Google Analytics 4 (measurement ID G-VHD2JKWXP1), Microsoft Clarity (project z8ppd43l78) and Adsterra (publisher 3403020) load on the first view: there is no gate that waits for an Accept click. YouTube is requested only when you press play on a trailer. Fonts are files we host ourselves, so they are not a third-party request.

The cookie banner is a notice and a withdrawal control, not a condition of use. A first visit is treated as granted for these tags. Before configuration, Google Consent Mode defaults advertising storage, user data and personalization to denied, with analytics storage granted; the page loader then applies the tag choice. Choosing Reject stores that choice for 180 days and reloads this page to stop active tags; Cookie settings in the footer reopens the banner so you can change your mind. We honour Global Privacy Control (GPC) and the Do Not Track header as a refusal even before the banner appears.

Google Analytics 4

GA4 sets _ga and _ga_<container>, both with a two-year lifetime, and sends page views, approximate location, device and browser information, and the referring page to Google. We use the reports to see which guides are read and which pages need work. Data is processed by Google LLC under its own terms. Legal basis: your consent where the law requires it, otherwise our legitimate interest in measuring whether the guide is useful (GDPR Article 6(1)(f)). To refuse GA4 in every site, install the Google Analytics Opt-out Browser Add-on; Reject on this site also stops the tag on later pages.

Microsoft Clarity

Clarity sets _clck (about one year), _clsk (about one day), CLID and MUID (about one year). It records sessions and builds heatmaps so we can see where a page is hard to use. Form fields and other sensitive text are masked by Clarity before recording; we do not configure it to capture them. Microsoft retains the recordings under its own schedule (normally 30 days; labeled or favorited sessions and selected recordings may be retained for 9 months) and processes the data as our processor. Legal basis: your consent where required, otherwise our legitimate interest in fixing usability problems (Article 6(1)(f)). Reject reloads this page and stops the tag; you can also use the Microsoft privacy statement to exercise your rights with Microsoft.

Adsterra

Adsterra (publisher 3403020) serves the in-page Native Banner and the floating Social Bar. Adult ads are switched off for this site. Adsterra and its demand partners may set cookies or local storage on their own domains (the initial ad host is bicea.org; creative and measurement requests may use partner hosts and can change); the names and lifetimes are chosen by Adsterra, not by us, and are used for frequency capping, fraud prevention, measurement and, where you have consented or the law allows it, personalised advertising. We do not receive those cookie values. Legal basis: your consent where required, otherwise our legitimate interest in funding the guide with advertising (Article 6(1)(f)). You can object to personalised advertising at Google Ads Settings, NAI opt-out, Your Online Choices or DAA WebChoices. Reject on this site stops the Adsterra tags on later pages.

YouTube

Trailer buttons show a picture we host. Pressing play inserts a frame from youtube.com; that request is YouTube's and is made only for the film you asked to watch. YouTube may set its own cookies once the frame exists. We do not control that. Not pressing play means no request to YouTube. See the Google privacy policy.

Observed network hosts

The local build audit on 5 November 2026 observed www.googletagmanager.com and www.google-analytics.com for Google, www.clarity.ms, scripts.clarity.ms and letter-prefixed *.clarity.ms collection hosts for Clarity, and bicea.org for Adsterra. A video click uses the privacy-enhanced YouTube host www.youtube-nocookie.com and its video delivery services. These hosts represent the named providers, not additional site operators.

Local storage on your device

We keep two records in local storage, not in a cookie, and we never receive a copy. uk_consent stores your choice (granted or denied) and a timestamp for 180 days. uk_socialbar_closed stores a timestamp for 180 days when you press Hide ad on the floating Social Bar, so it does not return on the next page view. Clearing site data in your browser removes both. Legal basis for these records: they are necessary to respect the choice you made (Article 6(1)(c) and (f)).

Retention

The consent and Social Bar records expire after 180 days. Our GA4 property keeps event data for 2 months and user data for 14 months, as read from its settings on 5 November 2026. Clarity normally keeps playback data for 30 days, with labeled or favorited sessions and selected recordings retained for up to 9 months; its heatmap and click data are retained for 9 months according to its current documentation. Adsterra keeps its own data under its retention policy. Server logs, if the host keeps them, are the host's and are used for security and capacity only.

Your requests

Email [email protected] to ask what we hold (in practice: mail you sent us), to correct a page, or to ask us to delete correspondence. You can also object to processing based on legitimate interests, ask for a copy, or complain to your local data-protection authority. We answer the mailbox we publish. We do not sell personal information.

Changes

The date in the footer is the revision. Material changes are posted on this URL before the new tag ships.