Privacy policy for eraly.xyz
Updated 2026-10-27. Checked against eraly.io where the note says so.
This policy describes eraly.xyz only. It was last changed on 2026-10-27. The game at eraly.io has its own policy at eraly.io/privacy. Email [email protected] for a privacy request.
What loads by default, and when
This guide loads Google Analytics 4, Microsoft Clarity and Adsterra advertising as soon as a page opens, before you click anything. The cookie banner is a notice and a withdrawal control, not a gate: Accept keeps the vendors on, Reject turns them off and stores that choice for 180 days. Global Privacy Control or Do Not Track is treated as Reject.
- Google Analytics 4 (GA4), measurement ID G-LNY8ZDFT8C, loaded from googletagmanager.com. It records page views, scroll and outbound-link events, approximate location derived from the request IP, device, browser and language. Google says it does not log or store the IP address in the property. GA4 uses
_gaand_ga_<stream-id>cookies; Google documents a default expiry of two years, subject to browser limits. Collection goes to google-analytics.com (including regional subdomains). See Google’s GA4 cookie documentation. - Microsoft Clarity, project z42k32uybv, loaded from clarity.ms and scripts.clarity.ms. It builds heatmaps and session recordings, including clicks, scrolling and masked page content. Clarity uses clarity.ms subdomains (including scripts.clarity.ms and lettered collection endpoints), and may use c.bing.com for Microsoft identity requests. Its documented cookies include first-party
_clckand_clsk, plusCLID,MUID,SM,MRandANONCHKwhere permitted by the browser. See Microsoft’s current cookie list and privacy statement. - Adsterra, publisher 3403020, website 6153896. The site runs two formats only: Native Banner (unit 31943945) and Social Bar (unit 31943946), both served from bicea.org. Adult ads are switched off. The network and its demand partners may set cookies or localStorage under bicea.org and adsterra.com to cap frequency, measure clicks, prevent fraud and personalise creatives when permitted. Requests observed during the 27 October 2026 review also included static.nresystems.com, cdn.storageimagedisplay.com, cdn.show-creative1.com, cdn.show-sb.com and cdn.cloudpiko.com. These are advertising delivery dependencies, not additional analytics products installed by this guide. Creatives and their delivery hosts can rotate. Potential network keys include
u_pl31943945,u_pl31943946,uncs*,uidm,pip_*,__cf_bmandsb_*; they are network-controlled, not a verified promise that every key is set on every visit. See Adsterra’s privacy policy for processing and retention. - The daily game iframe requests eraly.io only after you press Play. Until that click, the guide does not contact the game. Inside the frame, eraly.io loads its own Google Analytics, Google Tag Manager and Google Fonts, and shows its own cookie notice to EU, UK and Swiss visitors. This site cannot accept or refuse that notice for you.
- The walkthrough video is a local MP4 served from eraly.xyz. There is no YouTube player, no Cloudflare Insights script, and no third-party font request on this domain.
Storage on your device
Keys this site and its vendors write
| Key | Where | Purpose | How long |
|---|---|---|---|
| eralyxyz-consent | localStorage | Your Accept or Reject choice, plus the ad and analytics signals stored with it | 180 days, then the banner can ask again |
| eraly_float_closed | localStorage | Timestamp for closing the Adsterra Social Bar, so it stays closed across reloads | 180 days |
| _ga, _ga_ | cookie (eraly.xyz) | GA4 client and session identifiers, used to count visits and attribute events | Default 2 years, subject to browser limits |
| _clck, _clsk, CLID, MUID, SM, MR, ANONCHK | First-party and Microsoft-domain cookies | Clarity user and session identifiers, heatmap and replay state | See Microsoft’s current cookie list; duration varies by key |
| u_pl31943945, u_pl31943946, uncs, uncs29, uncs49, uidm, pip_*, __cf_bm, sb_main_*, sb_count_* | cookie / localStorage (bicea.org and eraly.xyz) | Adsterra unit and user identifiers, frequency capping, click measurement, fraud prevention and ad personalisation | Network-controlled; see Adsterra privacy policy |
Pressing Reject writes choice: "denied" to the consent record, updates Consent Mode to denied, then reloads the document to stop already-running vendor timers and listeners. The saved denial is read before GA4 config and prevents all three vendor loaders on subsequent pages for 180 days. Requests sent before the rejection cannot be recalled; previously set vendor cookies are not erased. Footer “Cookie settings” reopens the banner so you can change the choice at any time.
Legal basis, retention and your rights
- Analytics, session replay and advertising are enabled by default on this site. An absent choice is not affirmative consent: the banner discloses that default and Reject disables these services for 180 days. This technical notice does not certify compliance with every jurisdiction’s consent requirements. Security and fraud-prevention logging relies on our legitimate interest in keeping the site available.
- The consent record is kept for 180 days so the site can honour the choice you made. An email you send is kept long enough to answer it. Vendor retention depends on account configuration and the providers’ current policies linked above; this review did not establish property-level retention settings, so we do not promise a fixed deletion period for vendor-held data.
- You can ask for a copy or deletion of data we still hold, and you can object to processing. Write to the address above. You can also complain to your local data protection authority.
- A change to this page updates the date under the heading and the article modified time. The editorial policy covers sources, not tracking.
Advertising choices
Adsterra and its partners may personalise ads. You can opt out of interest-based advertising at youronlinechoices.com, optout.aboutads.info, Google Ads Settings or Microsoft ad settings. The Reject button on this site turns the Adsterra scripts off here; it does not delete cookies that a partner already set on another site.
This site does not run Popunder, Banner or Smartlink units, and adult advertising is disabled in the Adsterra panel. The only seller line in ads.txt is Adsterra publisher 3403020.
