Privacy policy

Who is responsible

The operators of frostrail.net. Email [email protected]. The game’s developer, FakeFish, and its publisher, Shiro Unlimited, do not run this site and do not receive this mailbox.

What loads by default, and how to turn it off

Google Analytics 4, Microsoft Clarity and Adsterra (Native Banner and Social Bar) load by default on the first view, before you touch the banner. YouTube stays as a thumbnail until you press play. Accept keeps the default. Reject saves the refusal for 180 days in localStorage key fr_consent and reloads the page so already-running analytics, replay and advertising code stops. Later visits skip these requests while that refusal remains valid. The footer’s “Cookie settings” button reopens the banner.

Global Privacy Control and Do Not Track also suppress the analytics, replay and advertising loaders. Google Consent Mode v2 starts with ad_storage, ad_user_data and ad_personalization denied, analytics_storage granted, and ads_data_redaction enabled. Advertising scripts still request by default under this site’s configuration. These settings alone do not prove what every ad partner does with data. Reject cannot recall data already sent or remove cookies already stored by a provider; use your browser’s controls to delete those cookies.

Cookies and localStorage keys

First-party localStorage: fr_consent holds {choice, exp}; choice is granted or denied and exp is 180 days after you click a banner choice. fr_ad_closed holds 1 after “Close ads”, so the Social Bar stays closed on later visits until you clear site data. The site does not transmit these two keys as message fields; third-party scripts running in the page can access browser storage. Remove stored data in your browser’s site settings.

Google Analytics 4

Site measurement id G-03Q25N81DE. The library requests www.googletagmanager.com and reports to www.google-analytics.com by default; Reject disables it. It can process page views, approximate location, device and browser details, referrers and interactions. No Google Signals or advertising-audience configuration appears in this site’s source. The account’s event-retention setting has not been verified, so this policy does not claim a two-month retention period. Ad-network scripts may also use analytics for their own measurement; those requests are part of default-on advertising.

Microsoft Clarity

Project id z58p4hlfkc. Microsoft Clarity requests www.clarity.ms, scripts.clarity.ms and rotating collection subdomains such as i.clarity.ms and j.clarity.ms by default. It processes session replay and heatmap events, including clicks, scrolling and page URLs. Reject reloads the page with Clarity disabled; a stored rejection skips its loader. We have not independently checked this project’s masking or retention settings, so do not send confidential information through this site.

Adsterra

Adsterra publisher id 3403020, website id 6159791; the stored configuration has adult advertising disabled. NativeBanner_1 (unit 31983390) and SocialBar_1 (unit 31983391) request bicea.org by default. The 29 October audit also observed the advertising delivery hosts static.nresystems.com, cdn.show-creative1.com, cdn.show-sb.com and cdn.cloudpiko.com. These are downstream requests initiated by the ad network, not separate services selected by this site. Adsterra and its partners may use cookies and device data for delivery, frequency limits, fraud checks and measurement. Hosts, creatives and cookie names may change. Reject stops both units and their running page by reloading with advertising disabled. “Close ads” separately remembers closure of the Social Bar in fr_ad_closed.

Provider policies

These links explain each provider’s processing. They open only when followed.

Google privacy policyMicrosoft privacy statementAdsterra privacy policy

YouTube and outbound links

A trailer stays as a thumbnail until you press play. The click then inserts an iframe to youtube-nocookie.com; after that Google can set cookies and read the player under policies.google.com/privacy. We do not receive a copy of that data. Purpose: play the official Shiro Games video. Legal basis: you asked for the video by clicking. Outbound links to Steam, Discord, Reddit and SurveyMonkey are ordinary links; they run only after you follow them, on those sites.

Email you send us

Email to [email protected] is handled through Cloudflare Email Routing and our mail-hub Worker so we can receive and reply. Mail content and sender details are stored by that service. This is triggered by sending an email, not by loading a guide. No fixed mailbox retention schedule was verified during the audit. Ask this address about access or deletion. Do not send passwords or payment card numbers.

Your rights, Do Not Track, and changes

You can ask for a copy of mail you sent us, ask us to delete it, or object to how we use it, by emailing [email protected]. If you are in the EEA or UK you can also complain to your local authority. We answer Global Privacy Control and Do Not Track by not creating the analytics, replay or ad requests. Changes to this policy are posted on this URL. The checked date is 29 October 2026, the same date as the rest of the site.