Privacy policy

The editor of christmasheist.com, reachable at [email protected]. I do not sell personal data and I do not run a user account system.

Three third parties load by default, on the first screen, without waiting for you to press Accept: Google Analytics 4 (measurement ID G-J5FD4H8LC7), Microsoft Clarity (project zcz4tudsp4) and Adsterra (publisher 3403020, website 6197026: a Native Banner inside the article and a Social Bar fixed to the bottom of the viewport). The cookie banner tells you this and offers Accept and Reject; it is a notice, not a gate. Reject — or a browser sending Global Privacy Control — stops Adsterra advertising and Clarity session replay; GA4 analytics continues, and that choice is remembered for 180 days. YouTube is the one exception: the trailer stays a local image until you press play, and only then is an embed requested from youtube-nocookie.com.

A fourth-party request follows from the ads themselves: Adsterra creatives and their measurement pixels are served from its own and its partners' domains, which can change per campaign. Adsterra's website for this domain has adult advertising switched off.

GA4 counts page views and records which pages, referrers, approximate location derived from the IP address, device and browser are used. I read aggregate reports only; I do not build profiles of individual readers and the default advertising consent signals are denied before the visitor’s saved or default choice is applied. Cookies are _ga and _ga_J5FD4H8LC7; GA4 remains enabled after Reject on this site; Reject changes advertising signals and stops Clarity and Adsterra. Google controls the processing and retention described in its policy. Google's own notice is at policies.google.com/privacy, and you can refuse measurement with the Google Analytics opt-out add-on.

Clarity records how a session is used: clicks, scrolling, taps, and a replay of the page as it was rendered. It also builds heatmaps. Form fields, and content marked sensitive, are masked by Clarity before anything leaves the browser; I do not type into your fields or read them. Cookies include _clck (visitor identifier) and _clsk (session identifier); retention follows Microsoft’s current policy. This site loads this vendor by default; Reject withdraws permission for further loads. Microsoft's notice is at privacy.microsoft.com/privacystatement; Reject here stops the Clarity tag, and the Microsoft privacy dashboard covers Microsoft's own services.

Adsterra serves the Native Banner inside the article and the Social Bar fixed to the bottom of the page. It receives the page URL, your IP address, user agent and the creative it showed, and it sets cookies on its own domains to cap frequency, measure clicks and filter invalid traffic. It may personalise ads using those signals. Adult ads are switched off for this website in the Adsterra publisher panel. This site loads this vendor by default; Reject withdraws permission for further loads. Adsterra's policy is at adsterra.com/privacy-policy. To turn personalised advertising off across networks, use Google Ads Settings (for Google-served ads), YourAdChoices (DAA) or Your Online Choices (EDAA). Reject on this site stops the Adsterra tags entirely and is remembered for 180 days; Cookie settings in the footer lets you change the choice sooner.

A trailer is shown as a local image. Pressing play creates an iframe from www.youtube-nocookie.com, and Google then receives your IP address and the page you came from; playback may set cookies on youtube.com depending on your Google settings. The click starts the player and its requests. Google's notice is at policies.google.com/privacy.

The banner controls session replay and advertising; GA4 analytics remains enabled. A legitimate interest in answering mail and keeping the pages accurate covers the editorial email you choose to send. You can ask for a copy, a correction, or deletion of what I hold, and you can complain to your local data protection authority. Email the contact address. Global Privacy Control is treated as Reject; a Do Not Track header is not a reliable signal in current browsers, so I key off Global Privacy Control instead.

Default loading, Reject withdrawal: with no stored choice the page loads GA4, Clarity and Adsterra and shows the banner. Pressing Reject removes the tags already created on that page view, records ch-consent with ads: false for 180 days, and the page reloads to stop running advertising and replay scripts, and later page views do not create those tags again (GA4 continues). Cookie settings in the footer reopens the banner so you can switch back to Accept. None of this depends on you pressing Accept first.

Changes to this policy are dated at the top of the page. The previous version is replaced rather than silently edited.