Matches the scripts on the page

Privacy policy

https://stealordie.com loads Google Analytics 4 (G-764Q1QYLR3), Microsoft Clarity (project z2lwy8cf3p) and Adsterra ads (publisher 3403020) on the first view. Reject turns all three off for 180 days. This page distinguishes provider-documented cookies from the storage keys set by this site.

Last checked 2026-10-24. Snapshot time 2026-10-24T06:58:05Z.

Fan-made horror aisle illustration for the Steal Or Die Roblox guide
Original fan-made illustration, 2026-10-24. Not gameplay, an entity portrait, or a verified map layout.

What I checked

I compared this text to the HTML and the loader in src/layouts/Base.astro. The first response contains no third-party script tag: the page creates the GA4, Clarity and Adsterra requests after parsing, and a stored Reject stops them before they are created. If a vendor changes its cookie names, I will update this page in the same release as the loader.

What loads, and when

The first response is HTML, CSS, images, and self-hosted fonts from this domain. After that, the page itself creates four third-party requests: Google Analytics 4, Microsoft Clarity, Adsterra Native Banner, and Adsterra Social Bar. None of them is a blocking script tag in the HTML; the loader in the layout creates each element on the first view.

YouTube is different. A video is only embedded after you press a footage button. At that point an iframe from https://www.youtube-nocookie.com/embed/ is inserted and YouTube (Google) can receive your IP address and set its own cookies. No YouTube request is made before that click.

The site also publishes links to Roblox, Steam, YouTube watch pages, and ad-industry opt-out pages. Following a link takes you to that company under its own privacy policy; those links are not requests made by this page.

Google Analytics 4

Provider: Google LLC. Property: website_167_gameinfo_stealordie.com. Measurement ID: G-764Q1QYLR3. The loader requests https://www.googletagmanager.com/gtag/js?id=G-764Q1QYLR3 and sends page views and events to https://www.google-analytics.com.

GA4 may set first-party _ga and _ga_<container> cookies, normally with a two-year expiry. We do not run a Google Ads tag. Event-data retention depends on the GA4 property setting, which was not verified in this review; we do not claim a site-specific 14-month setting.

Loading behavior: this service starts by default, before an affirmative choice. This is an opt-out implementation, not a claim that a default-on notice constitutes legal consent. Reject or Cookie settings turns it off. When you reject, the page sets window['ga-disable-G-764Q1QYLR3'], removes the gtag element, and reloads without it. Google's opt-out add-on is at https://tools.google.com/dlpage/gaoptout.

Microsoft Clarity

Provider: Microsoft Corporation. Project: z2lwy8cf3p. The loader requests https://www.clarity.ms/tag/z2lwy8cf3p and sends session replay, heatmap, and click data to *.clarity.ms. Clarity masks input fields and sensitive content by default; we have not verified a project-wide strict masking setting.

Microsoft documents _clck (user preferences) and _clsk (session grouping) as first-party cookies. CLID, ANONCHK, MR, MUID and SM are Microsoft third-party cookies, not cookies all set on this domain. Their availability depends on browser settings and consent. Microsoft documents playback retention of 30 days, labeled or favorited sessions for 9 months, and heatmaps for 9 months. Cookie lifetimes are provider-controlled and are not a measured site-specific inventory.

Loading behavior: this service starts by default, before an affirmative choice. This is an opt-out implementation, not a claim that a default-on notice constitutes legal consent. Reject or Cookie settings turns it off. Reject calls Clarity's consentv2 API with analytics_Storage denied, removes the tag, and reloads without it. Microsoft's privacy statement is at https://privacy.microsoft.com.

Adsterra advertising

Provider: Adsterra. Publisher ID 3403020, website ID 6146491. Two page-level units are placed: Native Banner NativeBanner_1 (unit 31895613) and Social Bar SocialBar_1 (unit 31895614). No Popunder, Banner, or Smartlink unit is placed, and adult ads are switched off in the dashboard.

The Native Banner requests https://bicea.org/21/2682492a24e062bc0d03a6c5f2fe11d4 and renders inside the Advertisement slot above the footer. The Social Bar requests https://bicea.org/14/86ff4d33de3f5277b4553d8f961e564e and renders as a fixed strip at the bottom. The directly configured ad-serving host is bicea.org. Adsterra can select additional demand partners; the exact downstream responses depend on the ad request, and none is asserted here as a measured default vendor. Cookie names and lifetimes are chosen by those vendors and can change; this review does not claim a verified cookie-by-cookie inventory. This site sets no Adsterra cookie itself.

This site does set localStorage key sod-floating-ad-closed when you close the Social Bar, so it stays closed on later pages. The value is 1 and it has no expiry; clearing site data removes it. The Native Banner and Social Bar are constrained locally to max-width 100vw with box-sizing border-box and overflow hidden, and body padding is reserved so the strip does not cover the footer.

Loading behavior: this service starts by default, before an affirmative choice. This is an opt-out implementation, not a claim that a default-on notice constitutes legal consent. Reject or Cookie settings turns it off. Reject sets sod-consent to denied for 180 days, removes both Adsterra scripts and the strip, and reloads without them. Personalized-ad controls: https://adssettings.google.com, https://optout.aboutads.info, https://www.youronlinechoices.eu, and https://optout.networkadvertising.org. The ads.txt file declares adsterra.com, 3403020, DIRECT.

YouTube embeds

Provider: Google LLC (YouTube). If you press a footage button, the page inserts an iframe from https://www.youtube-nocookie.com/embed/. YouTube receives your IP address and an origin referrer. Playback may use YouTube or Google cookies such as VISITOR_INFO1_LIVE, YSC, PREF or consent preferences, subject to provider changes and your browser settings; this site does not set or control their lifetimes. The nocookie domain limits advertising cookies before playback but does not make the request anonymous.

Legal basis: your action in pressing play, which is a direct request for that video. Do not press a footage button if you do not want YouTube to receive the request. Google's policy is at https://policies.google.com/privacy.

The consent record and your choices

localStorage key sod-consent holds one JSON object: choice (granted or denied), at (a millisecond timestamp), and days (180). It is read on every page and expires 180 days after at. The site also stores the Social Bar dismissal key. Vendors may use their own first-party cookies or storage as described above.

On a first visit with no saved choice, the loader treats you as granted, creates the GA4, Clarity, and Adsterra requests, shows the banner without recording an affirmative choice. Consent Mode starts with ad_storage, ad_user_data and ad_personalization denied, analytics_storage granted, and ads_data_redaction enabled before GA4 config. Default loading of Adsterra is separate from Google Consent Mode; it does not imply Google advertising consent. Clarity starts with analytics_Storage granted and ad_Storage denied. The banner is a notice with a Reject button, not a gate in front of the article. Reject writes choice denied, removes what this page view created, sets the GA4 disable flag, and reloads so later views make no vendor request. Accept writes granted and reloads if the previous choice was denied. The footer Cookie settings button reopens the banner. If the browser exposes navigator.globalPrivacyControl as true, or sends Do Not Track, the site treats that as Reject and disables Accept.

You can clear sod-consent and sod-floating-ad-closed at any time through your browser's site-data controls. Clearing them returns the site to the first-visit default, so the banner appears again.

Retention, rights, and changes

Retention follows each vendor: GA4 uses its property setting (not independently verified here); Clarity playback lasts 30 days, with labeled or favorited sessions and heatmaps kept 9 months; ad and video cookie lifetimes are provider-controlled; the saved visitor choice lasts 180 days. Email you send us is kept only as long as the thread needs.

You can ask for access, correction, or deletion of email you sent us, and you can object to how that mail is kept. Email [email protected]. You can also withdraw consent, clear the keys above, or complain to a data-protection authority where you live. The choice record is functional storage used to remember an explicit Accept or Reject. No affirmative consent is inferred from silence. The operator must separately assess any jurisdiction-specific legal requirements for default-on tracking. The legal basis for reading mail you send is that you asked us to reply.

This policy is dated 2026-10-24. A material change will edit this page and bump that date. The footer link is the current copy. Aliases /privacy-policy/, /cookie-policy/, and /cookies/ redirect here.

Questions

Do you sell personal data?

No. We do not operate a data broker. Adsterra and its demand partners may use the ad request under their own policies, which is why the opt-out links above are listed.

Does Play on Roblox load a video?

No. Play on Roblox opens the official Roblox experience page. Only the separate Footage buttons load a YouTube embed.

What happens if I press Reject?

The site writes sod-consent as denied for 180 days, removes the GA4, Clarity, and Adsterra elements, sets the GA4 disable flag, and reloads without them. Cookie settings in the footer lets you change the choice.

Sources

Advertisement