Privacy policy

What loads by default, and what Reject does

On a first visit this site loads Google Analytics 4, Microsoft Clarity and Adsterra (Native Banner and Social Bar) as soon as the page script runs. It does not wait for you to press Accept. Consent Mode v2 starts with analytics_storage granted and the three advertising signals denied; the vendor scripts still load by the site default. The banner is a notice and a withdrawal control: Accept records granted, while Reject turns all three off and stores denied for 180 days in the first-party localStorage key u2o_consent_v1.

If you Reject, the loader removes the GA4, Clarity and Adsterra scripts it created, hides the sponsored bar and sends Google a consent update that denies analytics and advertising storage. The choice survives reloads and later pages because it is read from localStorage before any third-party script is created. Cookie settings in the footer opens the banner again so you can change your mind. Global Privacy Control or Do Not Track is treated as Reject, and the page does not load the three services in that session.

The legal basis is your consent (GDPR Article 6(1)(a)) for analytics, session replay and advertising, and our legitimate interest (Article 6(1)(f)) in keeping the consent record itself. You can withdraw at any time with Reject; withdrawal does not affect processing that already happened. We do not sell personal data ourselves.

First-party storage this site sets

u2o_consent_v1 in localStorage holds granted or denied plus an expiry 180 days out. It is the record the banner and the loader read. u2o_floating_closed_v1 in localStorage remembers that you closed the Adsterra Social Bar; it has no expiry and stays until you clear site data. Neither key is sent to a server by this site.

The site itself sets no other first-party cookies. Fonts, images and styles are served from underground2online.com. The third parties below may set their own cookies or local storage when they load.

Google Analytics 4

Google Analytics 4 runs under measurement ID G-1C0WV3L4CM. It sets first-party cookies _ga (about 2 years) and _ga_1C0WV3L4CM (about 2 years), and may set _gid (about 24 hours). It records page views, approximate location derived from IP, device and browser details, and events such as outbound clicks. Google may process this data in the United States under its own safeguards.

Reports are kept for 2 months in this property. The legal basis is consent. You can refuse with Reject, block the tag with a content blocker, or install the Google Analytics opt-out browser add-on. Google ad personalization can be turned off at Google Ads settings.

Microsoft Clarity

Microsoft Clarity runs under project z4ihpe8k7u. It sets first-party cookies _clck (about 1 year), _clsk (about 1 day), MUID (about 13 months), ANONCHK (about 10 minutes) and SM (session), and may use local storage for its session state. Clarity records heatmaps and session replays of clicks, scrolls and page layout; form inputs are masked by default. It also records approximate location, device and browser data.

Session recordings and heatmap data are retained for about 30 days, while identifiers such as MUID can live for about 13 months. The legal basis is consent. Reject stops the loader from creating the Clarity tag and asks Clarity to withdraw consent. Microsoft’s privacy statement is at https://privacy.microsoft.com/privacystatement, and its opt-out page is at https://choice.microsoft.com.

Adsterra

Adsterra supplies the Native Banner (unit 31959263) inside the page and the Social Bar (unit 31959264), the fixed floating bar. Our publisher ID is 3403020 and the website ID is 6156120. Adult ads are switched off in the Adsterra panel for this site.

Adsterra and its demand partners may set cookies or local storage on underground2online.com and on their own domains to cap frequency, measure clicks and choose creatives. On 2026-10-28 the ad requests used bicea.org, static.nresystems.com, cdn.storageimagedisplay.com, cdn.show-sb.com, cdn.show-creative1.com and cdn.cloudpiko.com; these are disclosed as Adsterra delivery or demand-partner hosts, not separate services run by this site. Names observed in the delivered loaders include _eabid, _eabk, _eeabb and _eppk; the vendor may add others. Retention is set by Adsterra and can run up to about 13 months. The legal basis is consent. Reject removes the ad scripts and the floating bar for 180 days.

You can opt out of personalized advertising at https://optout.aboutads.info, https://www.youronlinechoices.com and https://www.networkadvertising.org/choices, and read Adsterra’s policy at https://adsterra.com/privacy-policy/. Opting out does not stop ads; it stops personalized ads. Our ads.txt declares adsterra.com,3403020,DIRECT so buyers can verify the seller.

YouTube, only after a click

Video buttons do not load a player until you press them. The click inserts a frame from https://www.youtube-nocookie.com/embed/ with allow="microphone" and a sandbox that includes allow-same-origin and omits allow-top-navigation. Google may set cookies at that moment under its own policy. The legal basis for the click is your request to play the clip. You can refuse by never pressing play; YouTube is not loaded by the default consent path.

We do not run any other advertising network, and we do not run a traffic-mesh or pop-under SDK. If that changes, this page changes in the same release and the new vendor is named here before it loads.

Retention, rights and contact

The consent record lasts 180 days or until you clear it. The floating-bar close flag lasts until you clear site data. Google Analytics reports last 2 months in this property; Clarity recordings last about 30 days; Adsterra retention is set by Adsterra and can run up to about 13 months. Server logs for the static host are kept for 30 days for security and are not used to build a profile.

You can ask what this site stores, correct a factual page, object to processing, or withdraw consent. Email [email protected]. Because the consent record lives in your browser, we cannot read it from the server; the email route is for questions about this policy and the site. You also have the right to complain to your local data protection authority.

Changes to this policy show a new Last checked date on this page. The contact address is on the brand domain, and mail for it is handled by Cloudflare Email Routing.