What this site stores, and what it does not.
A short policy that matches the code: one first-party key, the providers named below, and a Reject button that actually stops them.
FIELD
NOTES
The short version.
GAG2 Hub is a static site. It has no accounts, no comment system, no newsletter and no server of its own that stores visitor data. The only thing it writes to your browser today is a consent record; analytics, session recording and advertising load by default and are removed the moment you press Reject. Nothing about you is sold by this site, and no page asks for your Roblox credentials.
Third-party scripts present in this build: Google Analytics 4 (gtag.js). The rows below describe each provider that the code can load, and which of them are live right now.
Keys written to your browser.
| Key | Type | Purpose | Retention |
|---|---|---|---|
gag2hub-consent-v1 | localStorage (first party) | Remembers whether you accepted or rejected analytics, session recording and advertising. | 180 days, then the banner asks again. |
| _ga (2 years), _ga_<container> (2 years), plus the Consent Mode signal recorded in the page. | Cookies and similar storage (third party) | Google Analytics 4 (gtag.js) — active in this build | Set by the provider; see the row above. |
| _clck (1 year), _clsk (1 day), plus a session identifier. | Cookies and similar storage (third party) | Microsoft Clarity — not loaded in this build | Set by the provider; see the row above. |
| Advertising identifiers and frequency-capping storage set by the network. | Cookies and similar storage (third party) | Adsterra (Social Bar and display units) — not loaded in this build | Set by the provider; see the row above. |
Every provider the code can load.
| Provider | Host | Purpose and data | Legal basis | Status |
|---|---|---|---|---|
| Google Analytics 4 (gtag.js) | googletagmanager.com / google-analytics.com | Aggregated page views and traffic sources; no advertising profiles built by this site. _ga (2 years), _ga_<container> (2 years), plus the Consent Mode signal recorded in the page. | Consent (Art. 6(1)(a) GDPR); loaded by default and switched off when you press Reject. | Loaded by default |
| Microsoft Clarity | clarity.ms | Session replay and heatmaps used to find broken layouts; inputs are masked by the provider. _clck (1 year), _clsk (1 day), plus a session identifier. | Consent (Art. 6(1)(a) GDPR); loaded by default and switched off when you press Reject. | Not loaded |
| Adsterra (Social Bar and display units) | adsterra-hosted script domains | Advertising that funds the site; the unit is constrained to the bottom-right corner and never covers navigation. Advertising identifiers and frequency-capping storage set by the network. | Consent for advertising (Art. 6(1)(a) GDPR); personalised advertising can be declined at the network level. | Not loaded |
| Cloudflare | cloudflare.com | CDN, TLS and the tunnel that reaches the origin. Cloudflare processes request metadata as a processor; no analytics cookie is set by this site through it. | Legitimate interest in serving the site securely (Art. 6(1)(f)). | Always on |
Withdrawing, objecting, erasing.
Press to reopen the banner at any time; Reject removes the provider scripts from the current page and records the choice for 180 days. Global Privacy Control and Do Not Track are treated as a rejection: the providers are not loaded in that browser at all.
For personalised advertising you can also opt out at the network level: youronlinechoices.com (EU/UK) or optout.aboutads.info (US). Google’s own controls are at myadcenter.google.com.
Requests for access, correction, deletion, restriction or objection go to [email protected] and are answered within 30 days. Because this site has no accounts, the practical scope of an erasure request is the consent record in your own browser plus whatever a provider holds under its own identifier — deleting the provider cookies removes the link.
How this policy changes.
Any new provider, storage key or retention period is added to this page in the same release that ships the code, and the revision date below moves with it. The editorial policy explains how content and infrastructure revisions are recorded.
Last revision 2026-11-02. Data controller: GAG2 Hub (independent fan project), reachable at [email protected].