Privacy Policy
This page matches the scripts in the built site as of 8 Nov 2026. Google Analytics 4, Microsoft Clarity and two Adsterra units load by default; the banner informs you and Reject turns them off for 180 days. No vendor is added without this page changing in the same release.
Who is responsible
The site is shibuyacodes.org. Mail [email protected]. There is no separate company address on file. The site is a fan guide for the Roblox experience Shibuya [Beta] and is not operated by its developer.
Loaded by default, turned off by Reject
On a first visit no stored choice exists, so the website starts its vendor loaders and requests Google Analytics 4, Microsoft Clarity and the two Adsterra units with the first paint. The banner is an explanation and a withdrawal control, not a gate: pressing OK records agreement, while pressing Reject records a denial for 180 days and reloads the page without vendor scripts. Previously transmitted data cannot be recalled. “Cookie settings” in the footer opens the banner again so the choice can be changed. Global Privacy Control or Do Not Track set to 1 is read as Reject. Before any Google configuration, Consent Mode v2 defaults ad_storage, ad_user_data and ad_personalization to denied, analytics_storage to granted, and ads_data_redaction to true. The default loader setting is separate from these Google signals.
Google Analytics 4
Google Analytics 4 runs under measurement ID G-J8XP0PV5RY and is loaded from googletagmanager.com. It records page views, approximate location derived from IP, device and browser, referral source, and interactions such as outbound clicks. It sets the first-party cookies _ga and _ga_J8XP0PV5RY, both kept for two years, and sends hits to google-analytics.com. The processor is Google LLC; data may be processed outside your country under Google’s safeguards. The first request follows the default website setting; sc_consent records an explicit choice when you press OK or Reject. Refuse or withdraw with Reject, or install Google’s opt-out add-on; Google’s own description is in the Google privacy policy.
Microsoft Clarity
Microsoft Clarity runs under project zagq0loo34 and is loaded from clarity.ms. It records session interactions and heatmaps: pages viewed, clicks, scrolling, and a coarse device and browser profile. Clarity applies masking to sensitive content according to its masking settings. It sets the first-party cookies _clck (one year) and _clsk (one day), and Microsoft may read or set CLID and MUID on clarity.ms and bing.com for up to 13 months. Ordinary session playback is retained for 30 days; labeled or favorited sessions and heatmaps are retained for nine months, according to Microsoft’s documentation. The processor is Microsoft Corporation. This service starts by default; an explicit choice is recorded through the banner. Refuse with Reject, or read Microsoft’s privacy statement.
Adsterra advertising
Advertising is sold by Adsterra (publisher 3403020, website 6185091). Two units load by default: a Native Banner in the content flow and a Social Bar fixed to the bottom of the viewport. Adult ads are switched off for this site. The units are served from bicea.org and may call the vendor’s creative and measurement hosts, including show-creative, show-sb, cloudpiko and nresystems; the actual chain varies by creative. Adsterra and its demand partners may set identifiers in their own origin to cap frequency and measure a view; those keys live in the bicea.org frame, are not readable by this site, and last as long as the vendor’s own policy allows. This service starts by default; an explicit choice is recorded through the banner. Refuse with Reject, which removes both units. Personalised-advertising controls for other sites are at Google ad settings, aboutads.info and Your Online Choices; Adsterra’s own description is its privacy policy.
YouTube, after a click
Video buttons show a picture from this site. The player from youtube-nocookie.com is created only when you press play, so it is the one embed that waits for an action; Google may then set its own cookies and receive your IP address. That is Google’s processing, described at Google’s privacy policy and partner sites.
Keys, where they live, and how long
| Key | Where | Purpose | How long | Basis |
|---|---|---|---|---|
| sc_consent | localStorage on shibuyacodes.org | The granted or denied record, with ads and analytics flags, timestamp and expiry | 180 days | Your choice, stored so the banner does not nag |
| sc_adbar_closed | localStorage on shibuyacodes.org | Remembers that you hid the Adsterra Social Bar | Until you clear site data | Your choice |
| _ga | Cookie on shibuyacodes.org | GA4 client identifier | 2 years | Default loading; OK / Reject control |
| _ga_J8XP0PV5RY | Cookie on shibuyacodes.org | GA4 session state for this property | 2 years | Default loading; OK / Reject control |
| _clck | Cookie on shibuyacodes.org | Clarity user identifier | 1 year | Default loading; OK / Reject control |
| _clsk | Cookie on shibuyacodes.org | Clarity session identifier | 1 day | Default loading; OK / Reject control |
| CLID, MUID | Cookies on clarity.ms and bing.com | Microsoft identifier sync for Clarity | Up to 13 months | Default loading; OK / Reject control |
| Adsterra identifiers | Storage in the bicea.org frame | Frequency capping and view measurement | Vendor-defined | Default loading; OK / Reject control |
The record written under sc_consent looks like a small note: choice, ads, analytics, a timestamp, and an expiry. Reject sets both flags to false and updates Google’s consent signals to denied. Clearing site data deletes both local keys, and the next visit starts from the default again.
Host logs and fonts
The host that serves the files may keep ordinary request logs: IP address, user agent, and the path, for security and operations. Retention is the host’s own window, and the basis is legitimate interest in keeping the site online (GDPR Art. 6(1)(f)). Fonts are files on this domain, not a call to a font service. No other analytics store runs on top of the ones named above.
Your rights
You can ask for access, correction, deletion, or a restriction, and you can object to a legitimate-interest use. Email the desk. You can also complain to your local authority. I will answer to the mailbox above. Changes to this policy show up as a new date at the top of the page, and a new vendor is named here before it ships.
Sources
- Google privacy policy for Analytics 4 and the optional YouTube player; GA4 cookie documentation, checked 8 Nov 2026.
- Microsoft privacy statement for Clarity; cookie documentation and retention documentation, checked 8 Nov 2026.
- Adsterra privacy policy for the two ad units.
- How Google uses information from partners.