Privacy Policy

Who is responsible

The publisher of pokebonk.run is the controller for the choice stored in your browser and for the visit counts described below. Email [email protected]. We do not run the game at pokebonk.com, and this policy does not cover that site.

What loads, and why

First-party inline script (every page). It calls gtag("consent","default") before any Google configuration. ad_storage, ad_user_data, and ad_personalization start as denied and analytics_storage starts as granted. When the page finishes parsing, the site’s own consent path records the default granted choice (unless Global Privacy Control is on) and updates the advertising signals to granted before the Adsterra loader runs. Pressing Reject writes denied and withdraws the advertising and recording scripts. ads_data_redaction and url_passthrough are on.

Google Analytics 4 (Google LLC), every page. The page loads gtag.js from www.googletagmanager.com and sends a page view to property G-W64D5M6EWE through www.google-analytics.com and region1.google-analytics.com. Google may set the first-party cookies _ga and _ga_W64D5M6EWE (up to two years) to tell browsers apart. The request includes your IP address, user agent, the page URL and the referring page. Google processes this data for us in the United States; we see aggregate reports only and use them to count visits and see which guides are read. Google Analytics 4 event data is kept for 14 months. To refuse it, press Reject on our banner (remembered for 180 days), use the Google Analytics opt-out browser add-on, block googletagmanager.com, or send Global Privacy Control.

Adsterra (Adsterra Network), every page by default. Two units are installed. Native Banner unit 31842601 loads the script at https://bicea.org/21/96d05617a9f19b048eafc3c67a679f0f and writes its creative into a container on the page. Social Bar unit 31842602 loads https://bicea.org/14/f9b195c7877421e73670c1cbb2016bcf and renders the fixed sponsored bar at the bottom of the viewport; the bar has a local close button, and its closed state is remembered for 180 days. Both scripts run from bicea.org and may also contact the ad-serving domains named in their code (including mamshirt.com and cdn.cloudvideosa.com) and the creative hosts they select. Adsterra receives your IP address, user agent, referring page, the page URL, and pseudonymous identifiers used for frequency capping, fraud prevention, and ad measurement. It may set first-party cookies or localStorage entries including _esid, _eppk, _esbpk, _earpk, _earid, _epid, _eabid, _ger, _cepf, _iops, _bbrm, _odfl, __mfg_ck__, psid, and keys beginning sb_idelay_ or sb_onpage_. Because the snippets are served from bicea.org, Cloudflare may also set its __cf_bm bot-management cookie on that domain. Adsterra controls the lifetime of its identifiers: session-scoped values and campaign or frequency-cap identifiers are kept for up to 30 days, __mfg_ck__ can persist for up to one year, and __cf_bm is short-lived (about 30 minutes). Legal basis: consent (GDPR Article 6(1)(a)) for advertising storage and personalised advertising, and legitimate interests (Article 6(1)(f)) for security, fraud prevention and aggregate measurement. You can withdraw at any time with Reject or Cookie settings; you can also use Adsterra’s privacy and cookie pages, the Digital Advertising Alliance opt-out at https://optout.aboutads.info/, or the European Your Online Choices page at https://www.youronlinechoices.com/.

Microsoft Clarity (Microsoft Corporation), every page by default. The official snippet loads www.clarity.ms/tag/z10230y9th and scripts.clarity.ms and sends interaction and session-replay data to *.clarity.ms. Microsoft may set the first-party cookies _clck and _clsk (up to one year) to recognise a browser and stitch a session together. Clarity masks text and form inputs by default in Microsoft’s configuration, but a recording can still include pages viewed, clicks, scrolling, device and browser details, and your IP address. Microsoft processes this in the United States; we use aggregate heatmaps and recordings to improve the guides. Press Reject or use Cookie settings to turn recording off and withdraw Clarity consent, or block clarity.ms. Global Privacy Control also keeps it off.

localStorage key pokebonk_consent stores JSON {choice, expires} for 180 days to remember your preference. The expiry is checked when a page opens; localStorage has no automatic expiry, so an expired value may remain on disk until you replace or clear it. localStorage key pokebonk_socialbar_closed stores {closed, expires} for 180 days when you close the Adsterra Social Bar, so the bar does not return on the next page view. Cookie settings reopens the choice panel. You can remove either key through your browser settings. These preferences are first-party and are not sent to an advertising network as such.

YouTube (Google), only after a click. Video cards use a locally hosted illustration, not a YouTube thumbnail request. Pressing play loads www.youtube-nocookie.com. Our clicked-player check also requested www.google.com, fonts.gstatic.com, www.gstatic.com, i.ytimg.com, yt3.ggpht.com and jnn-pa.googleapis.com. Google video delivery may additionally use googlevideo.com and youtube.com, depending on playback and region. These are Google/YouTube player services, not a separate analytics integration by this site. The player receives your IP address and browser information and may use storage once you interact. Loading is optional: use the external watch link instead. Rejecting the general banner does not block a video that you separately request.

No other advertising network or banner SDK is installed. The site does not load traffic-mesh, popunder, push-notification, or smartlink scripts. Microsoft Clarity is the only session-recording script. Consent defaults are queued before the Google tag configuration; the default-on path grants the three advertising flags, activates Adsterra, and activates Clarity. Reject keeps the advertising flags denied, turns Google Analytics 4 off (analytics_storage denied), and withdraws Clarity consent, as does a Global Privacy Control signal. If we add another ad network, this policy will be updated before it is enabled.

Signals, ads, and rights

If navigator.globalPrivacyControl is true, all four storage flags are denied, the Adsterra loader does not run, and Clarity stays off, including after a preference-button click. Cookie settings remains available. We do not sell or share visitor information for cross-context behavioral advertising beyond the ad delivery described above. The advertising seller declared in /ads.txt is adsterra.com, publisher 3403020, DIRECT; no other seller line is published.

Cloudflare provides domain DNS and Email Routing. Mail sent to [email protected] is forwarded by Cloudflare to the publisher’s Gmail mailbox (Google). These mail services process the sender address and message content; do not send passwords or game account secrets. These services are not browser-side tracking scripts. The static site is served from our own host; the hosting and tunnel provider may process ordinary HTTP request data for delivery and security.

You can contact us for access, correction, deletion, or a copy of a message you sent, subject to applicable rights and any necessary retention. Keep only the information needed for the correction or request. You can change your browser preference through Cookie settings or clear the localStorage keys. A video player already loaded is removed when you leave or reload the page; changing the general banner alone does not unload it. Changes to this policy are dated here.