HILLTHORN
EN한국어日本語

Updated 13 Nov 2026

Privacy policy

Hillthorn.org is a static guide. It loads Google Analytics 4, Microsoft Clarity and Adsterra advertising by default and asks for your choice in a banner that you can reopen at any time. Pressing Reject turns analytics and ads off for 180 days. YouTube is loaded only when you press play on a trailer.

Official Steam screenshot from Hillthorn
Screenshot: Hillthorn on Steam. © Fool Moon, Finnegan Motors, and Raw Fury. Checked 2026-11-13.

Who is responsible

The site operator can be reached at [email protected]. That is the address for privacy requests as well as corrections. See the contact page.

Cloudflare provides hosting and email routing. Requests to this site can expose an IP address and request metadata to the hosting provider; correspondence sent to our address passes through the configured email service.

Default loading and how to withdraw

On a first visit this site loads Google Analytics 4, Microsoft Clarity and Adsterra ads without waiting for a click. The banner explains that and offers Accept and Reject. Reject updates Google's signals to denied, stores the choice and immediately reloads this page without loading the GA4, Clarity or advertising tags, and is remembered for 180 days in the key hillthorn-consent. Accept records the same choice for 180 days. The footer link Cookie settings reopens the banner so the choice can be changed.

If the browser sends Global Privacy Control (GPC), the site treats that as Reject and does not wait for a click. Do Not Track is not used because browsers do not send it consistently.

The small Hide ads control above the in-page ad stores hillthorn-ads-closed in local storage and reloads this page without Adsterra and keeps advertising disabled on later visits. Clear this site’s stored Hide ads choice to bring ads back.

Local storage used by this site

  • hillthorn-consent — your Accept or Reject choice plus an expiry timestamp. Kept 180 days, then treated as missing and the default-on behaviour applies again.
  • hillthorn-ads-closed — set only when you press Hide ads. It has no expiry and stays until you clear site data for this domain.

These two keys are written by this site, not by a third party. The site does not set its own cookies.

Google Analytics 4

Google Analytics 4 measures page views and browser, device, referrer and approximate-location information. The configured Measurement ID is G-0RZYHKW97J. The tag loads by default from www.googletagmanager.com and can send measurement requests to www.google-analytics.com or its regional collection hosts. Reject disables this tag and reloads the page; later visits keep it disabled until you change the choice or the 180-day choice expires.

GA4 can write _ga and property-specific _ga_* cookies. This site declares Consent Mode v2 before any config: advertising storage, ad user data and ad personalization begin denied, analytics storage begins granted, and ads data redaction is enabled. The default-on site choice is then applied unless a stored Reject or Global Privacy Control is present.

Google controls service-side processing and retention under its privacy policy. The GA opt-out add-on is an additional browser option.

Microsoft Clarity

Microsoft Clarity supplies heatmaps and session recordings for layout analysis. Project zcz08j554w loads by default from www.clarity.ms; subsequent service requests can use other Clarity and Microsoft domains, including scripts.clarity.ms, *.clarity.ms collection hosts and c.bing.com. Reject disables the tag and immediately reloads the page.

Clarity may write _clck and _clsk cookies. Microsoft may use other service identifiers under its own policy. Clarity receives device, interaction and page-rendering data. Do not send sensitive data in a guide-page URL.

See Microsoft’s privacy statement and Clarity’s cookie list for service-side processing and retention details.

Adsterra advertising

Adsterra supplies NativeBanner_1 and SocialBar_1. Both load by default through bicea.org; the network can request creatives and measurement resources from additional advertising partner domains. These requests can send your IP address, browser/device information, referrer and ad interactions to Adsterra and its partners, which may use cookies or other device identifiers.

Reject records your choice for 180 days and reloads this page without either advertising script. Hide ads separately stores your ad visibility choice and reloads without the ad network. These controls stop subsequent requests from this page; information already transmitted remains subject to the recipient’s policy.

The site passes no email or account data to these ad tags. Adult ad categories are disabled in the recorded network setup. See Adsterra’s privacy policy for the network’s processing, partner information and privacy requests.

YouTube trailers

Trailer buttons show a picture stored on this site. Pressing play creates a YouTube player from www.youtube-nocookie.com; that is the first moment a YouTube request is made. YouTube may then set VISITOR_INFO1_LIVE, YSC, PREF and similar cookies, and Google receives your IP address and the page you came from. The privacy-enhanced domain limits some advertising cookies but does not make the embed anonymous.

Legal basis: your action of pressing play is consent under Art. 6(1)(a) GDPR for that single embed. If you never press play, no YouTube request is made. Google's policy: policies.google.com/privacy.

Hosting and local assets

Fonts, styles, screenshots, trailer thumbnails and the guide’s own scripts are stored on this site. Cloudflare is the hosting and email-routing provider. There is no remote font service, comment system, newsletter widget or social embed. Store and source links contact their destinations when you follow them. Advertising and analytics services can contact their own delivery and collection partners as described above.

Cloudflare privacy policy.

Retention, transfers, and your rights

The site’s consent record expires after 180 days; the Hide ads setting lasts until you remove it. Hosting logs, analytics, recordings, advertising data and international transfers follow the respective providers’ configured services and policies. We have not published a fixed provider-side retention period without a verified configuration record.

You can ask about correspondence, request a correction or request deletion of a mail thread by writing to [email protected]. The site has no reader accounts. Requests concerning a provider’s identifiers or records can also be sent through that provider’s privacy controls.

Changes

We update the date on this policy when the site’s data handling changes. This revision was checked against the site’s scripts and local browser measurements on 13 November 2026.

Official Steam screenshot from Hillthorn
Screenshot: Hillthorn on Steam. © Fool Moon, Finnegan Motors, and Raw Fury. Checked 2026-11-13.

Questions people ask

Do you use cookies?

The site itself uses local storage, not cookies: hillthorn-consent for 180 days and hillthorn-ads-closed until you clear it. Google Analytics 4, Microsoft Clarity, Adsterra and YouTube set their own cookies when they load, and the policy lists them.

Do you run ads?

Yes. Adsterra supplies a Native Banner in the page and a floating Social Bar. Both load by default and stop when you press Reject or Hide ads. Adult ads are switched off in the Adsterra account.

What happens if I press Reject?

This page reloads with analytics and ad scripts disabled, and the choice is remembered for 180 days. Cookie settings in the footer reopens the banner.

What happens if I press play on a trailer?

The page then loads a YouTube player from youtube-nocookie.com. That is the first moment a YouTube request is made.

Related reading

Sources

Advertisement