Privacy policy
metro2039.pro shows advertising from Adsterra — one native banner inside the page and one floating bar — plus Google Analytics 4 and Microsoft Clarity session recording. None of those start on arrival: the head of every page sets all four Consent Mode v2 storage types to denied, and every analytics, recording, and ad script is injected only after you press Accept. Reject leaves all four denied and loads none of them. Cloudflare serves the site and adds its own cookieless edge beacon, which no consent banner can switch off, and YouTube loads only after you press a trailer poster. Your choice is stored in this browser under the localStorage key m2039-consent for 180 days.
I checked this text against the code and the live site on 17 October 2026. As built, the head of every page runs gtag('consent', 'default', ...) with ad_storage, ad_user_data, ad_personalization, and analytics_storage all denied, plus ads_data_redaction and url_passthrough, and only then calls gtag('config', 'G-FSP4K1ZW8B'). The initial HTML requests exactly one third-party file of ours, gtag.js from googletagmanager.com; fetching the home page and grepping it finds the Adsterra and Clarity hosts as strings inside our own script, but no script tag with a src pointing at them. (Cloudflare's edge additionally injects its own cookieless beacon, which is not in our markup and which we cannot gate.) Accept is what creates those tags: the Clarity loader (project yyoy07ii7u), the Adsterra Native Banner unit ac0d8fb44b4cf9d327327bfc4476e29c, and the Adsterra Social Bar unit ed03dc133216712b0d20e92f8311a9bb. The ad units and their ids come from our own Adsterra publisher account, website 6127793, with the adult-ads category switched off. If any of that changes, this page changes in the same release. Reject, a Global Privacy Control signal, or Do Not Track loads none of it.
What actually loads
Fonts ship with the site from the font files we bundle. The browser does not call fonts.googleapis.com. Images and pages are served from metro2039.pro. There is no comment system, no login, and no newsletter on this site.
Cloudflare serves this site: Pages for hosting, its CDN, DNS, and the email routing behind [email protected]. Every request to the domain therefore passes through Cloudflare, which sees your IP address, user agent, and the page requested, and may set strictly-necessary security cookies such as __cf_bm while it verifies that a request is genuine. Cloudflare also injects its own Web Analytics beacon (static.cloudflareinsights.com/beacon.min.js) at the edge, outside our page markup: it sets no cookies, does no fingerprinting, and reports only aggregated performance data. A consent banner cannot gate it, because it is not added by our code. See the Cloudflare privacy policy at cloudflare.com/privacypolicy for its retention.
Google Analytics 4 (measurement ID G-FSP4K1ZW8B) loads from googletagmanager.com with the page, but all four Consent Mode v2 storage types start denied and ads_data_redaction is on, so it writes no cookie and keeps no client identifier for you until you accept; a cookieless page view can still reach Google. Accept turns analytics_storage on, which lets Google write the _ga and _ga_FSP4K1ZW8B cookies. Reject leaves all four denied.
Adsterra is the only advertising network here. Two units run, and both scripts are injected into the page only after you press Accept: a native banner (unit ac0d8fb44b4cf9d327327bfc4476e29c) placed in the content above the footer, and a floating social bar (unit ed03dc133216712b0d20e92f8311a9bb) that Adsterra anchors at the edge of the viewport. We requested both from our own Adsterra account (website id 6127793) with the adult-ads category switched off, so adult creatives are not served on this domain. The loader scripts come from bicea.org; the network then serves its configuration, creatives, and impression pixels from a rotating set of domains it operates. Adsterra receives your IP address, user agent, the page URL, and ad view and click counts, and sets the cookies sb_main_... and sb_count_... (suffixed with the unit id) plus storage of its own on those domains. We pass Adsterra no data about you ourselves.
Microsoft Clarity records how pages are used — clicks, scrolling, and replay sessions for usability — for project yyoy07ii7u, and its loader is injected only after you press Accept. It runs from clarity.ms and reports to clarity.ms/collect; it sets the cookies _clck and _clsk and can keep a Clarity session id in your browser. Clarity masks text content by default in its own configuration; we have not asked it to record keystrokes or form input on this site.
Trailer posters are images on this site. Pressing one inserts an iframe to youtube-nocookie.com. That is YouTube, a Google service. YouTube can then set its own cookies and read the embed. We do not control that. If you never press play, that iframe is not added.
The consent banner writes localStorage, not a cookie, when you accept, reject, or when Global Privacy Control or Do Not Track is on. The value is granted or denied plus a timestamp. We keep it for 180 days and then treat it as missing. Cookie settings in the footer opens the banner again.
The floating Adsterra bar can be switched off with Hide ad bar in the footer. We remember that in localStorage under m2039-adbar-hidden so the bar is not requested again on later visits; Show ad bar puts it back. That key is not a consent record: it only records that you closed the bar. The bar is constrained to the viewport width, and while it sits at the bottom of the viewport the page reserves room for it so it cannot cover the footer.
| Name | Purpose | Retention | Basis |
|---|---|---|---|
| m2039-consent (localStorage) | Remember accept or reject | 180 days | Consent. GPC or DNT forces reject |
| m2039-adbar-hidden (localStorage) | Remember that you hid the floating ad bar | Until you clear it or press Show ad bar | Your choice, not tracking |
| Google — gtag.js | Audience measurement, G-FSP4K1ZW8B | Loaded always, storage denied until Accept | Consent Mode v2: your Accept |
| Analytics cookies _ga, _ga_FSP4K1ZW8B | Count visits and page views after Accept | Set by Google, not by us | Your Accept; denied until then |
| Microsoft Clarity — clarity.ms loader, _clck and _clsk | Heatmaps and session replay, project yyoy07ii7u | Loaded only after Accept; cookies set by Microsoft | Your Accept |
| Adsterra — bicea.org loader, sb_main_... and sb_count_... cookies | Serve and measure the native banner and the social bar | Loaded only after Accept; cookies set by Adsterra | Your Accept |
| Adsterra website id 6127793 | The Adsterra record this domain runs under | Adult ads off | Our vendor record |
| Cloudflare — Pages/CDN and its edge beacon | Serve the site, keep it online, aggregate performance data | Security cookie __cf_bm where needed, short-lived; beacon sets no cookies | Legitimate interest in delivering the page you asked for |
| YouTube embed | Play an official trailer after a click | Set by Google, not by us | Your click, then their terms |
Rights and opt-outs
You can withdraw consent at any time with Cookie settings in the footer, which reopens the banner; Reject then applies to the four storage types. To remove what earlier visits left behind, clear this site's cookies and site data in your browser — nothing we store about a visit lives on a server of ours.
For personalised advertising across other companies, use your Google Ads Settings and the industry opt-outs at optout.aboutads.info and youronlinechoices.com. Adsterra's own privacy and cookie policies explain what it does with the ad requests it receives from this domain.
You can write to [email protected] to ask what we hold about you, ask us to delete it, or object to how we use it. We do not build reader profiles and we do not sell data. Requests about data held by Google, Microsoft, Cloudflare, or Adsterra are best sent to them directly; we will help where we can.
Global Privacy Control and Do Not Track (when the browser reports doNotTrack as 1) are recorded as a rejection: the banner stays dismissed, all four storage types stay denied, and no ad, analytics, or recording script is injected. The current date of this policy is 17 October 2026.
Questions
Do you show ads?
Yes. Adsterra is the only ad network on metro2039.pro, with two units: an in-page native banner and a floating social bar. Both load only after you press Accept, adult ads are switched off for this domain, and Reject loads neither.
Do you set cookies without consent?
No. All four Consent Mode v2 storage types start denied, and the only third-party file our initial HTML requests is Google's gtag.js, which writes no cookie while storage is denied. (Cloudflare's edge beacon is cookieless and sits outside our markup.) Analytics, Clarity session recording, and both Adsterra units are injected only after Accept.
How do I switch the floating ad bar off?
Press Hide ad bar in the footer. The choice is stored under m2039-adbar-hidden and the bar is not requested again; Show ad bar brings it back.
Does ads.txt authorise Adsterra?
Yes. ads.txt declares one seller line, adsterra.com, 3403020, DIRECT, using the account id from our own Adsterra publisher record. No other network is declared, because no other network serves this domain.
Sources
- Adsterra privacy policy
- Adsterra cookies
- Microsoft privacy statement (Clarity)
- Google privacy policy
- Industry ad opt-out
Last checked 2026-10-17.
Related
- Contact — Privacy mail goes to the same address.
- Editorial policy — How articles are sourced.