Privacy Policy

Who is responsible

The site editor of stealabalut.org is responsible for this guide. Email [email protected] about privacy or correspondence. We do not run a shop or require an account.

What loads on a normal visit

A first visit, with no stored choice and with Global Privacy Control and Do Not Track both off, is treated as granted. The page then creates the scripts below immediately, before you click anything in the banner. Nothing is held back until an Accept click. The banner is notice plus a withdrawal control, not a gate.

This site also serves its own HTML, CSS, fonts and images. The fonts are files we host, not a Google Fonts request. There is no AdSense unit, no Popunder, no Smartlink, and no other ad network on these pages.

The choice we store: sab-consent

The key is sab-consent in local storage. Its value is a small record: choice is granted or denied, plus an expiry 180 days ahead. A first visit without a record loads the vendors and shows the banner without recording an explicit choice. Accept writes granted. Reject writes denied, reloads the page with the vendors off, and the denied record suppresses Google Analytics 4, Clarity and Adsterra on later visits until it expires or you change it. Cookie settings in the footer opens the banner again. If navigator.globalPrivacyControl is true, or Do Not Track is 1, the page writes denied and keeps these vendors off.

The floating Social Bar has its own close button. Closing it writes sab-ad-float-closed in local storage, with closed, a timestamp, and an expiry 180 days ahead, so the bar stays closed after a reload rather than returning on the next page view.

These are the site application’s two preference records, used so the banner and floating bar remember your choices. Vendors can additionally set cookies on this domain, including Google Analytics and Clarity identifiers. You can withdraw with Reject or delete this domain’s stored data in your browser; the preference records expire after 180 days. Reject stops new vendor requests but does not delete existing vendor cookies.

Google Analytics 4

GA4 loads by default from googletagmanager.com and sends page views to google-analytics.com. Reject stops it on this site. The tag runs with Consent Mode v2: analytics_storage starts granted; ad_storage, ad_user_data and ad_personalization remain denied, including after Accept, and ads_data_redaction is enabled. Google may transfer data outside your country under its safeguards. Google’s policy is https://policies.google.com/privacy and its opt-out add-on is https://tools.google.com/dlpage/gaoptout.

Microsoft Clarity

Clarity loads by default from clarity.ms and reports to *.clarity.ms; Reject stops the loader. It records clicks, scrolls and a replay of the session so we can see which parts of the guide are hard to use. Microsoft masks form fields by default; we do not ask you to type personal data into this site. Microsoft’s privacy statement is https://privacy.microsoft.com/privacystatement and its Clarity data page is https://learn.microsoft.com/clarity/setup-and-installation/privacy-disclosure.

Adsterra and personalized advertising

Adsterra serves the Native Banner inside the content and the Social Bar fixed at the bottom-right. Its default call scripts use bicea.org; the permitted creative chain includes cdn.show-creative1.com, cdn.show-sb.com, cdn.cloudpiko.com and static.nresystems.com, when the network returns a creative. Adsterra and its demand partners may set cookies or read device identifiers to choose an ad, limit frequency, and detect fraud. Reject stops this site’s ad loader. We do not pass your email or account data to Adsterra; these placements have adult ads disabled.

Use Reject to stop this site’s ad requests. Broader industry preference tools are available at https://optout.aboutads.info/ (DAA), https://optout.networkadvertising.org/ (NAI), https://www.youronlinechoices.com/ (EDAA), and https://adssettings.google.com/ for Google-served ads. Those external tools control personalization rather than this site’s loader. Adsterra’s policy is https://adsterra.com/privacy-policy/.

YouTube, when you press Play

The privacy-enhanced player is created only after the click, from www.youtube-nocookie.com/embed/. YouTube can then receive your IP address and make additional requests to its video and image delivery hosts, such as googlevideo.com and ytimg.com. Player storage and playback processing follow Google’s policy at https://policies.google.com/privacy. Reject controls the default analytics, replay and ads; pressing Play remains an explicit request to load YouTube.

Your rights and changes

You can ask for a copy of any email you sent us, ask us to delete that correspondence, object to how the mailbox is used, and withdraw the cookie choice with Reject or Cookie settings. We do not sell personal information. Depending on where you live you may also have the right to access, correct, delete, or port data, and to complain to your local data protection authority. Write to [email protected] and we will answer from the same address. This policy was updated on 4 Nov 2026; a change to the vendors or the keys will show a new date here first.