Privacy Policy

Who is responsible

The operator of thehollow.pro, reachable at [email protected]. There is no separate legal entity named on this site. Requests about your data go to that address.

The site is a static guide. It has no account system, newsletter, comments, or checkout, so we do not hold a profile of you on our own server. The third parties below receive the request data described in their sections.

Default loading, the banner, and Reject

On a first visit with no stored choice, the loader uses a default-on setting and loads Google Analytics 4, Microsoft Clarity, Adsterra Native Banner and Adsterra Social Bar immediately. No video player or other third-party iframe is currently embedded. The banner is notice and a withdrawal control, not a gate in front of the scripts.

Pressing Reject writes a denied record, sends a denied update to Google Consent Mode, clears the ad containers and reloads the page. On that reload and subsequent visits while the record is valid, Google Analytics, Clarity and both ad scripts are not requested. Reloading unloads timers and event listeners from scripts that have already executed; removing a script tag alone would not stop them. The choice is remembered for 180 days in localStorage under th_consent_v1. Pressing OK saves the default-on choice; when changing from Reject, it reloads the page to restart the integrations. Cookie settings in the footer reopens the banner so you can change either choice.

If the browser exposes navigator.globalPrivacyControl as true, we treat that as Reject, write the denied record, and do not wait for a click. We do not use the retired DNT header as a switch.

Google Analytics 4 (Google LLC)

Measurement ID G-QFHYR5WHF1. The tag loads from https://www.googletagmanager.com/gtag/js and sends page views and events to https://*.google-analytics.com. We use it to count page views and see which guides are read. Before any config call, Consent Mode v2 defaults ad_storage, ad_user_data and ad_personalization to denied, analytics_storage to granted, and ads_data_redaction to true. A saved Reject or Global Privacy Control also denies analytics. The default-on partner loader subsequently updates consent signals; the banner remains visible on a first visit.

Google documents first-party cookies including _ga and _ga_<container-id> for distinguishing visitors and sessions, with default expiration of two years. Browser restrictions and property settings can change actual storage. This policy does not claim to have verified the property-side retention configuration. Requests may include browser, device, page and referrer information. See https://policies.google.com/privacy and Google’s cookie documentation in Sources.

Microsoft Clarity (Microsoft Corporation)

Project ID z2jgm9nwyp. The loader creates https://www.clarity.ms/tag/z2jgm9nwyp after the page starts and the SDK reports to https://*.clarity.ms/collect. Clarity gives us heatmaps and session recordings. The site does not configure custom unmasking rules or provide a form for sensitive information. Do not enter sensitive information into third-party creatives.

Microsoft documents first-party cookies _clck for a site-specific visitor identifier and _clsk for connecting page views into a session. Its cookie list also includes CLID, ANONCHK, MR, MUID and SM; which are set depends on consent, browser and region. These are provider-documented possibilities, not a claim that every one was observed here. We do not assert unverified localStorage key names or a project-specific retention period. Microsoft may process device and interaction data. See https://privacy.microsoft.com/privacystatement and the Clarity documentation in Sources.

Adsterra (Adsterra Network)

Publisher ID 3403020, website ID 6146123. Adult ads are off. We run two placements: NativeBanner_1 (unit 31892981) in the content area above the footer, and SocialBar_1 (unit 31892982) as the fixed bar at the bottom of the viewport. The loader creates both scripts from https://bicea.org/… after the page starts. We do not run a Popunder, a Smartlink, or a banner unit.

Adsterra and permitted creative hosts may receive IP address, user-agent, page and advertising interaction information and may use cookies for advertising delivery, frequency capping or fraud prevention. Cookie names and retention vary by campaign and browser; we do not claim a fixed cookie inventory or an unverified 30-day expiry. We have not verified any adsterra_* localStorage keys. Read https://adsterra.com/privacy-policy/ for provider processing and rights information. Reject disables the two loaders on the reloaded page.

The Social Bar is fixed to the bottom of the viewport. We constrain it locally to max-width:100vw, box-sizing:border-box and overflow:hidden, reserve 96px of body padding while it is open, and provide a Close ad bar button. Closing it writes th_socialbar_closed for 180 days, so it does not return on the next page load. Reject removes it as well.

Cookies and localStorage on this site

First-party localStorage: th_consent_v1 holds the consent record (choice granted or denied, an expiry timestamp, and a schema version) for 180 days. th_socialbar_closed holds the Social Bar close record (closed true, expiry, version) for 180 days. Both stay on your device and are sent to no one; deleting site data removes them.

Our own code does not set an authentication or session cookie. Provider SDKs can set first-party cookies on this domain, including Google Analytics and Clarity cookies; first-party scope does not mean they were created by our own code.

Provider storage: Google and Microsoft cookie examples are described above and in the linked official documentation. Ad creatives may use additional provider-controlled storage. Your browser’s site-data panel shows the actual keys for your visit. Reject prevents future analytics and ad loader requests while its record is valid; it does not promise deletion of existing cookies on unrelated provider domains.

Ads, personalized advertising, and opt-outs

We do not operate a data-broker service; advertising partners receive the request data described above. Adsterra may serve contextual or personalized ads depending on your region and its partners. Reject turns the ad scripts off for 180 days. You can also use the industry opt-out pages: Google Ads Settings at https://adssettings.google.com, the DAA WebChoices tool at https://optout.aboutads.info, the NAI opt-out at https://optout.networkadvertising.org, and Your Online Choices at https://www.youronlinechoices.com. Opt-out tools use cookies themselves, so clearing cookies can reset them.

For analytics, the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout stops measurement in browsers that support it. Reject is the site-level control and applies to both analytics and ads.

International transfers and processors

Providers may process data outside your country. Their linked privacy policies describe their entities, processing locations and transfer safeguards; we do not infer a provider’s headquarters or contractual safeguards from its script hostname. Our own hosting provider processes request logs for security and serving the pages; we do not use those logs to build an advertising profile.

Your rights

You can ask for access, correction, deletion, restriction, portability, or object to processing. Because the consent and Social Bar records stay on your device, deleting site data in the browser is the direct route for those. For anything the operator actually holds, write to [email protected] and we will answer within 30 days. You may also complain to the supervisory authority where you live, or to the UK Information Commissioner’s Office for UK visitors.

Changes

The date on this page is the policy date. A material change, such as adding a network or a new cookie, will be noted here and in the banner before the new script ships. The current integration list is Google Analytics 4, Microsoft Clarity and Adsterra.