Privacy policy

Who is responsible

The editors of witchbrook.app are the controller for the data this site handles. Email [email protected]. There is no separate company name to list.

Default loading and how to withdraw

On a first visit this site loads Google Analytics 4, Microsoft Clarity and Adsterra immediately, without waiting for a click. The cookie banner is a notice with two buttons: OK keeps everything on, and Reject stores that choice for 180 days and reloads the page without analytics, session recording or advertising. A saved rejection is read before any optional script is requested. Cookie settings in the footer reopens the notice. Global Privacy Control is treated as a rejection before these loaders run.

Loading is default-on, not conditional on prior opt-in. The notice is not a claim that prior consent has been obtained or that this setup satisfies every jurisdiction's prior-consent rules. A rejection cannot recall data already sent; it stops subsequent optional loading. Google Consent Mode starts with the three advertising signals denied and analytics storage granted; ads data redaction is enabled.

Google Analytics 4

Google Analytics 4 receives page views, approximate location, device/browser details and interaction events. Measurement ID: G-GH9X4HJXB4. It requests www.googletagmanager.com and www.google-analytics.com (regional collection endpoints may vary). Its first-party cookies include _ga and _ga_<container>; Google's documented default expiration is two years, but actual configuration and browser limits can shorten this. We have not independently verified a property-specific event-retention setting and do not claim one. Reject sets all four consent storage signals to denied, disables this measurement ID, removes accessible site analytics cookies and reloads without gtag. See Google's data collection documentation, Google's privacy policy and its Analytics opt-out add-on.

Microsoft Clarity

Microsoft Clarity records session replays, heatmaps and click/scroll events; masking is not a guarantee of complete anonymity. Project: z53wp82qw9. The loader uses www.clarity.ms, scripts.clarity.ms and collection subdomains of clarity.ms. Cookies may include _clck and _clsk. Provider retention and masking rules are described in Clarity's FAQ and Microsoft's privacy statement; this site does not promise a separately verified retention setting. It loads by default. Reject signals withdrawal and reloads the document without either the tag or its runtime.

Adsterra advertising

Adsterra loads a native banner (unit 31979122) and a social bar (unit 31979123) by default. The integration record disables adult advertising. The loaders use bicea.org; observed downstream delivery hosts on October 29, 2026 include static.nresystems.com, cdn.show-creative1.com, cdn.show-sb.com and cdn.cloudpiko.com. These are advertising delivery requests, not additional site-selected analytics providers; network-selected hosts and creatives can change. Requests expose IP address, browser details and page/referrer information. Advertising identifiers, cookie names and retention depend on the network: we do not invent a fixed cookie list or expiry. See Adsterra's privacy policy. Reject reloads without either unit or their downstream scripts. Close ad hides the social placement for 180 days but is not a general advertising opt-out; use Reject for that.

YouTube

Video previews are served from this site's own /video/ directory. No YouTube thumbnail or player request is needed on load. Pressing Play inserts a sandboxed iframe to www.youtube-nocookie.com; Google/YouTube can then request playback assets from hosts such as googlevideo.com and ytimg.com, receive IP/device information and use storage under Google's policy. Reject disables automatic analytics and ads but does not prevent a video you explicitly choose to play.

Storage on this device

This site writes two localStorage keys of its own. wb_consent_v1 holds {choice, ts, exp}: the choice (granted or denied), when it was made, and an expiry 180 days later. wb_social_closed_v1 holds the timestamp until which the fixed Adsterra bar stays closed, also 180 days. Both are read only by this site and are removed when you clear site data. The analytics and advertising cookies named above belong to those providers, not to this site. Ordinary server logs may record IP addresses; this static site does not build a profile from them.

Retention, legal basis and your rights

Choice and bar-close records expire 180 days after the corresponding action; ordinary page views do not extend them. Provider retention follows the linked provider policies, not an unverified site-specific promise. Do not delete the choice record to opt out: a missing record restores default-on loading. Press Reject instead. You may request access, correction, deletion, restriction or portability, or object to processing, by emailing the address above, and may complain to your local supervisory authority. We do not claim prior opt-in for first-visit automatic processing. Infrastructure security and responding to correspondence are necessary site operations; any applicable legal rights remain unaffected by the default-on notice.

Cloudflare serves the static site and handles mail routing. Messages to our contact address pass through Cloudflare Email Routing to our mail-hub Worker, are stored for correspondence and may be mirrored to the operator's Gmail account. Do not send passwords or children's personal details. We do not promise an unverified fixed mail/log retention period; ask the contact address for deletion. Cloudflare's privacy policy describes its infrastructure processing. The site does not inspect the browser's Do Not Track signal; Global Privacy Control is the supported automatic rejection signal. Policy changes are dated above.