SHARK.IO Privacy policy
This policy matches the scripts these pages actually load as of 10 November 2026. Google Analytics 4, Microsoft Clarity, an Adsterra Native Banner and an Adsterra Social Bar load on the first page view unless you press Reject. YouTube loads only when you press play.
Who is responsible
The editorial operator of sharkgame.org is the publisher of this guide. Reach that operator at [email protected]. PEGASUS develops Shark.io and Poki publishes it; neither operates this website, and neither is the contact for these pages.
The site is served from Cloudflare infrastructure. Cloudflare also provides our DNS and email routing; it does not inject an analytics script into these pages.
What loads, and when
The first HTML document contains no script src pointed at an advertising, session-replay or analytics host. The Google Analytics 4, Clarity and Adsterra tags are created by a small local loader after the document is parsed. Nothing waits for an Accept click: a visitor with no stored choice is treated as granted, sees the banner explaining the choice, and the three services load on that first page view.
Pressing Reject switches the three Google ad signals and analytics_storage to denied and stops Google Analytics 4, Clarity and both Adsterra units from being requested on the next page view. The choice is remembered for 180 days. Global Privacy Control and Do Not Track are treated as Reject from the start.
Third parties and storage
The table lists every third party and every first-party key this build can write. If a service is not in this table, it is not supposed to be on the site.
| Name | When it loads | Purpose | Keys or cookies | Retention |
|---|---|---|---|---|
| First-party consent record | On every visit, before the other scripts | Remember Accept or Reject and the 180-day window | localStorage sg_consent, value {"choice":"granted|denied","exp":<epoch ms>} | 180 days, then treated as a fresh visit |
| First-party ad-bar close flag | Only when you press Hide ad bar | Keep the fixed Adsterra Social Bar hidden on later visits | localStorage sg_ad_bar_closed | Until you clear site data; no expiry date |
| Google Analytics 4 (gtag.js), measurement ID G-PBLW3TG63M | On the first page view unless you press Reject | Aggregate visit statistics | Cookies _ga and _ga_<container-id>; requests to googletagmanager.com and google-analytics.com | The GA4 property retention setting has not been independently recorded; browser cookie duration follows Google’s configuration and your browser settings |
| Microsoft Clarity (project zbai0ljdoj) | On the first page view unless you press Reject | Session replay and heatmaps of how pages are used | Cookies _clck (about 1 year) and _clsk (about 1 day); Microsoft may also set MUID, CLID and ANONCHK; requests to clarity.ms and *.clarity.ms, including the collect endpoint | Session recordings are kept by Microsoft for up to 30 days; heatmap and aggregate data follow Microsoft Clarity retention terms |
| Adsterra Native Banner (unit 32186025) | On the first page view unless you press Reject | In-page advertisement above the footer | Requests to bicea.org. Adsterra sets its own cookies and browser storage to cap frequency and measure impressions; we set none of those keys ourselves. Adult ads are off for this site. | Set and expired by Adsterra under its own policy; cleared from your browser when you clear site data |
| Adsterra Social Bar (unit 32186026) | On the first page view unless you press Reject, and until you hide it | Fixed advertisement bar at the bottom of the viewport | Requests to bicea.org; the same Adsterra cookies and storage apply. Our own close flag is the sg_ad_bar_closed localStorage key. | Adsterra controls its own retention; our close flag lasts until you clear site data |
| YouTube (Google), privacy-enhanced | Only when you press a play button | Show the video you asked for | Requests to youtube-nocookie.com; playback may also contact youtube.com, googlevideo.com and ytimg.com. YouTube may set VISITOR_INFO1_LIVE, YSC and PREF. | Google controls playback cookies and their retention; we set none of them |
| Cloudflare | On every request and on email delivery | DNS, email routing and hosting | Server logs with IP address and browser headers; no analytics script is injected | Per Cloudflare retention terms |
Cookies, localStorage and how to remove them
The only first-party values we write are sg_consent and, if you hide the fixed bar, sg_ad_bar_closed. Neither is a cookie. You can delete both from your browser site-data settings; the banner will then appear again and a fresh visit is treated as granted. The footer control labelled Cookie settings reopens the banner so you can change the choice without hunting through browser menus.
The third-party cookies in the table are set by Google, Microsoft and Adsterra when their scripts run. We cannot read or delete them from this site. Clearing site data for sharkgame.org removes the first-party keys; clearing cookies for google-analytics.com, clarity.ms and bicea.org removes theirs.
Legal basis and your choices
Ads and session replay are enabled by default until you choose Reject. The absence of a stored choice is treated by this implementation as permission to load those scripts; it is not an affirmative consent action. Reject stops Google Analytics 4, ads and session replay and records your preference for 180 days. Delivering pages and answering email also involves technical request data and any information you send. This description records the site’s behavior and does not claim that default loading constitutes consent under every applicable privacy law.
Global Privacy Control (navigator.globalPrivacyControl) and Do Not Track (navigator.doNotTrack set to 1) are treated as Reject immediately: the ad and Clarity scripts do not load, and the banner is not used to nudge you into opting in.
You may email [email protected] to ask what we hold. Because there are no accounts, that is usually the consent keys in your own browser, which you can inspect or delete yourself. If you are in the EEA or the UK you may also complain to your local supervisory authority. We do not sell personal information.
Advertising and personalized ads
Adsterra serves both units and may use your device data to choose, cap and measure creatives. You can opt out of personalized advertising through Google ad settings (https://adssettings.google.com/), My Ad Center (https://myadcenter.google.com/), the DAA opt-out (https://optout.aboutads.info/), the NAI opt-out (https://optout.networkadvertising.org/), or Adsterra’s own privacy policy and opt-out instructions at https://adsterra.com/privacy-policy/. Pressing Reject on this site stops the Adsterra scripts from loading here at all.
Video, external links and email
The video is a click-to-play facade: no YouTube frame is requested until you press the play button, and the frame uses youtube-nocookie.com. Links to Poki and to store pages are ordinary links; nothing is embedded from them, and they are contacted only if you follow the link. If you send email to [email protected], Cloudflare Email Routing sends it to the mail-hub Worker for mailbox processing; the message includes your address and whatever you write. We keep correspondence only as long as needed to answer it.
Changes to this policy
This page’s date is the change log. A material change replaces the text and the date at the top of the article. Store pages for the game describe the game’s own data practices; those are the developer’s notices, not ours.
FAQ
Do analytics, ads and Clarity load before I choose?
Yes. A visitor with no stored choice is treated as granted: Google Analytics 4, the Adsterra Native Banner, the Social Bar and Microsoft Clarity load on the first page view, and the banner tells you so. Pressing Reject stops all of them and records the choice for 180 days.
How do I change my choice?
Use Cookie settings in the footer. Accept or Reject overwrites the sg_consent record. Reject sets the Google ad signals and analytics_storage to denied and stops Analytics 4, Clarity and Adsterra on the next load.
Can I remove the fixed ad bar?
Yes. Hide ad bar closes the Adsterra Social Bar and stores sg_ad_bar_closed in localStorage, so the bar is not requested again on later visits until you clear site data.
Does Reject stop Google Analytics 4?
Yes. Reject sets analytics_storage to denied, removes the GA4 tag and stops Clarity and both Adsterra units on the next page view; the choice is remembered for 180 days.
Related
Sources
- Google Analytics privacy — checked 2026-11-10
- Microsoft Clarity privacy — checked 2026-11-10
- Adsterra privacy policy — checked 2026-11-10
- YouTube embed host — checked 2026-11-10
- Google Ads Settings — checked 2026-11-10