Privacy
Privacy policy
This policy covers arenaofchampions.xyz, an independent fan guide. The game at arenaofchampions.live is a different site with its own practices. Privacy requests go to [email protected].
Default loading and your 180-day choice
The site loads Google Analytics 4, Microsoft Clarity and Adsterra on the first view. A visitor with no stored choice is treated as granted: the page writes that default record, starts the providers immediately and shows the notice so the choice can be withdrawn. The notice is information plus an opt-out, not a gate in front of the scripts.
Reject stores a denied choice for 180 days, sends Google a denied consent update, sets the GA4 opt-out flag, calls Clarity’s Consent V2 API with denied storage signals, removes the provider tags and ad units, and reloads into a new document. With a stored denied choice, the loader does not request GA4, Clarity or Adsterra. Removing a tag alone cannot undo code or requests that already ran, and Reject does not erase data already received by a provider. Accept stores a granted choice for 180 days and restores the providers. The footer control labelled Cookie settings reopens the notice at any time; it does not grant anything by itself. A browser that sends Global Privacy Control is recorded as denied and treated as a rejection. Do Not Track is not used as a substitute for Global Privacy Control. Clearing site data for this origin removes both records.
The site's own storage keys are aoc_consent (choice granted or denied, timestamp, record version, and whether the notice was dismissed) and aoc_ads_closed (timestamp written by Hide ads). Both are kept for 180 days and then ignored. They are local storage only and are not sent to a server.
What the pages load
The lead reviewer’s mobile checks on 30 Oct 2026 observed six host categories: www.googletagmanager.com, www.google-analytics.com, www.clarity.ms, scripts.clarity.ms, a varying a–u.clarity.ms subdomain, and bicea.org. No iframe was present in the initial state. The table distinguishes those observations from other endpoints documented or potentially used by the providers; it does not claim every listed host was contacted in that test.
| Provider | Hosts and purpose | Storage |
|---|---|---|
| Google Analytics 4 | www.googletagmanager.com serves gtag.js; www.google-analytics.com, regional *.google-analytics.com and *.analytics.google.com receive measurement hits. Used for aggregate page, referrer and device statistics. Measurement ID G-PTSVR0X1PZ. | Google’s current GA4 document lists _ga and _ga_<container-id> with default expiration of two years, subject to browser limits and property configuration. _gid belongs to the legacy analytics.js/Universal Analytics documentation; it is not listed here as a GA4 cookie or as observed storage on this site. Consent Mode v2 starts with analytics_storage granted and the three advertising signals denied until the page updates them to granted under the default-loading policy; Reject sets them back to denied. |
| Microsoft Clarity | www.clarity.ms and scripts.clarity.ms serve the tag; *.clarity.ms receives heatmap and session-recording data. c.bing.com may be used for Microsoft cookie synchronisation. Project ID z5mpq7i5u3. | Microsoft’s current Clarity cookie list names _clck, _clsk, CLID, ANONCHK, MR, MUID and SM. That document describes their purposes but does not specify expiration times. This page therefore does not claim a fixed duration for them; in particular, it does not describe SM as a one-day cookie. The documented key is SM, not _SM. Not every cookie is set in every browser. Clarity provides masking controls, but this review did not inspect a recording or certify that every sensitive field is masked. Project-level retention is controlled in the Clarity dashboard; I did not independently verify the configured period, so no fixed project retention is asserted here. |
| Adsterra and creative delivery partners | bicea.org serves the Native Banner and Social Bar scripts. The lead reviewer’s current mobile check observed bicea.org, not additional downstream creative hosts. Creatives and their delivery partners can vary by region, auction and visit; this snapshot is not an exhaustive future host list. Publisher 3403020, website 6161529; NativeBanner_1 unit 31996092 and SocialBar_1 unit 31996093. The configured units are Native Banner and Social Bar; this page does not guarantee the contents of every third-party creative. | Adsterra and its creative partners may set cookies or local storage to cap frequency, measure impressions and personalise creatives. Names and lifetimes vary by creative and region; I do not assert cookie names or durations that I have not observed. Hide ads writes only the site's aoc_ads_closed key and removes the units and reloads the page with ads suppressed for 180 days. |
| YouTube (Google) | www.youtube-nocookie.com is requested only after a visitor presses a video cover. The embed uses privacy-enhanced mode, but playback still contacts YouTube and Google. | Before the click the page requests no YouTube frame and sets no YouTube cookie. After the click, YouTube may set playback and preference cookies under its own policy; the site's loader and Reject control do not reach inside that frame. |
Fonts and images are files shipped with this site. There is no newsletter, account, checkout, comment box or Cloudflare analytics beacon on these pages. No Google AdSense, Popunder, Banner or Smartlink unit is loaded.
Why the site processes this data
The site uses these services to measure readership, understand page use and fund the guide. Its current first-visit behaviour is default-on with an opt-out, not prior opt-in. A value of granted written automatically by code is a technical state, not evidence that a visitor has freely and actively consented. Displaying a notice or offering Reject afterwards does not turn that default into valid legal consent. Where applicable law requires prior consent for non-essential storage or processing, this default-on behaviour must not be represented as satisfying that requirement. This page does not claim EEA, UK or Swiss compliance merely because Consent Mode or a consent API is present. See the ICO guidance on cookies and active consent and the EDPB consent guidelines. Email correspondence is used to answer the request and maintain a correction record; do not send sensitive account credentials.
The site keeps its own consent and hide-ads records for 180 days. Correspondence is kept only as long as needed to answer it and to document a correction, then deleted. Provider-side retention is set by each provider: Google's GA4 property setting (user and event data), Microsoft's Clarity project setting, and Adsterra's own retention for campaign and delivery records. Those periods are not fixed by this page and can change; the provider links below describe the current defaults.
Personalised advertising and opt-out
Adsterra may serve personalised advertising when the granted record is present. You can turn advertising off here with Reject or Hide ads, and you can also use industry controls for participating providers (these do not guarantee that Adsterra or every creative partner is covered):
- Google Ad Settings for Google-served personalisation; this is not an Adsterra opt-out.
- DAA WebChoices and NAI opt-out for participating advertisers in the United States.
- Your Online Choices for participating advertisers in Europe.
- Adsterra privacy policy and Adsterra cookie policy for its own choices and contacts.
Opting out of personalisation does not necessarily stop ads; it stops ads based on your inferred interests. Browser settings that block third-party storage can also limit these providers.
Your rights and contact
You can ask for a copy of mail you sent, a correction, or deletion of that correspondence. You can withdraw the analytics, recording and advertising choice with Cookie settings in the footer, then Reject. You can also clear site data for this origin in your browser. Requests about data held by Google, Microsoft or Adsterra may need to go to that provider; the links above and their privacy policies explain how. You can complain to your local data-protection authority.
Contact [email protected]. This page was checked on 30 Oct 2026. Material changes are posted here with a new date. Provider references: GA4 cookies, Google privacy, Clarity cookie list, Clarity consent API, Microsoft privacy, Adsterra privacy, and YouTube embeds.
Questions
Do analytics, recordings and ads start before I press Accept?
Yes. A first visit with no stored choice is treated as granted, so GA4, Clarity and Adsterra start with the notice visible. Reject records denied for 180 days and reloads into a document without provider requests. It cannot undo requests already made or prove legal consent for the initial load.
What is aoc_consent?
A local storage record of granted or denied, with a timestamp, kept for 180 days. It is not sent to a server.
What does Hide ads do?
It writes aoc_ads_closed, removes the Adsterra units and the fixed bar, and reloads the page with ads off for 180 days. It does not stop GA4 or Clarity; use Reject for those.
How do I change my mind?
Use Cookie settings in the footer, then Accept or Reject. Reject reloads the page. Clearing site data removes the preference and restores the default-on first-visit behaviour unless Global Privacy Control is enabled.
Last checked: 2026-10-30. Public client notes through v0.21.1; not a live server version check. Sources: Google: GA4 cookie usage · Google: legacy analytics.js cookies · Microsoft: Clarity cookie list · Microsoft: Clarity Consent V2 · ICO: cookies and active consent · Contact.