Privacy policy

nfsonline.org loads four third parties: Google Analytics 4, Microsoft Clarity, Adsterra, and YouTube. The first three start on the first view without waiting for a click. YouTube loads when you press a play button. The cookie banner is a notice and a withdrawal control, not a gate: with no stored choice the site records granted and loads the scripts, and Reject records rejected and turns advertising, Clarity recording and Google Analytics off for 180 days.

Google Analytics 4 (Google). Measurement ID G-XBQ8080WMN. It receives the page URL, referrer, a rough device and browser description, and interaction events such as page views and outbound clicks. The site does not intentionally send email addresses or form text to Google Analytics. Google may set _ga and _ga_* cookies, which last up to two years. Google's policy is at https://policies.google.com/privacy and the tag reference is at https://support.google.com/analytics/answer/9268047.

Microsoft Clarity (Microsoft). Project z886qae2ol. It records heat maps and session replays of clicks, scrolls, and page structure. Clarity masks sensitive form inputs by default; masking behavior is described in its documentation. Microsoft may set _clck (one year), _clsk (one day), CLID (one year), ANONCHK (ten minutes), MR (seven days), MUID (one year), and SM (session) cookies. Microsoft's policy is at https://privacy.microsoft.com/ and Clarity's data notes are at https://learn.microsoft.com/en-us/clarity/.

Adsterra. Publisher 3403020, website 6174158, Native Banner unit 32085148, and Social Bar unit 32085149. The Native Banner is an in-flow slot above the footer. The Social Bar is the fixed card in the bottom-right corner. Adult ads are switched off for this site. Adsterra and the creative hosts it uses may set cookies for frequency capping, fraud prevention, and click attribution; observed request identifiers on bicea.org may include co_<unit-hash>_191 (seven days) and Cloudflare's __cf_bm (thirty minutes), and the remaining names and lifetimes are chosen by Adsterra and stated in its policy at https://adsterra.com/privacy-policy/. We do not receive your name or email from Adsterra.

YouTube (Google). A video button does not contact YouTube until you press play. After that, YouTube receives the request and may set VISITOR_INFO1_LIVE, YSC, and PREF cookies, which can last from the session up to two years. Their policy is at https://policies.google.com/privacy. We do not receive a copy of your YouTube account.

The site itself writes only two first-party local-storage keys. It does not write a first-party advertising cookie.

• nfsonline-consent — local storage, JSON {choice, exp}, kept 180 days. It records granted or rejected so the banner and the loaders remember your choice.
• nfsonline-ad-float-closed — local storage, JSON {closed, exp}, kept 180 days. It records that you closed the Adsterra Social Bar so it does not return on the next page.

Third-party cookies come from the four services above: Google Analytics (_ga, _ga_*, up to two years), Microsoft Clarity (_clck, _clsk, CLID, ANONCHK, MR, MUID, SM, from ten minutes to one year), Adsterra and its creative hosts (frequency-cap, fraud, and attribution identifiers, lifetimes set by Adsterra, with lifetimes determined by the network), and YouTube (VISITOR_INFO1_LIVE, YSC, PREF, session to two years). You can inspect or delete them in your browser's site-data panel at any time.

Legal basis. Analytics, session recording, and advertising use the default loading behavior described here. An unset choice is not an explicit consent action. The site defaults an unset choice to enabled and loads those services on the first view; pressing Reject withdraws that permission for 180 days and is as easy as pressing OK. We rely on our legitimate interest in remembering the choice and keeping the site secure for the two local-storage keys. If you email us, the basis for handling that message is your request.

Retention. The two local-storage keys expire after 180 days. Google Analytics retention is controlled by the property configuration and Google’s retention policy; we have not published a property-specific retention period. Clarity’s public FAQ describes data access for up to 30 days from recording; Microsoft controls its service retention. Adsterra keeps its own logs under its policy. YouTube keeps data under Google's policy. Email you send is kept while the thread is useful for a correction, then deleted.

Reject and change later. Choose Reject in the banner to switch advertising signals to denied, remove the Adsterra units, and stop Clarity and Google Analytics. The footer link Cookie settings shows the banner again without changing the saved choice until you select an option, so you can change the choice at any time. Reject is remembered for 180 days.

Global Privacy Control. If your browser sends Global Privacy Control, the site records rejected before showing the banner and does not wait for a click. Do Not Track is not a reliable signal in modern browsers; we honor Global Privacy Control instead.

Personalized advertising. Opt out of Google personalized ads at https://adssettings.google.com/, and use the industry pages https://optout.aboutads.info/ and https://www.youronlinechoices.com/ for other networks. Adsterra's own choices are described at https://adsterra.com/privacy-policy/. Blocking cookies may leave the site working but will not stop every request, because the scripts still ask their hosts for a response.

Rights. You can ask for a copy of mail we still hold, ask us to correct a factual page, or ask us to delete the thread. Email [email protected]. You can also complain to your local data-protection authority. We do not sell personal information.

Write to [email protected] for a privacy request or a correction. The site is operated from that address. When a third party is added or removed, this page changes in the same release and the date above moves. Children are not the audience. This policy describes the scripts in the build dated 2026-11-04; it does not describe a service that is not loaded.