Home / Privacy

Privacy – Voxel Heroes Roblox

Last verified: 2026-11-12

This policy matches the scripts on the site as of 12 Nov 2026. Google Analytics 4, Microsoft Clarity and Adsterra load by default; Reject turns them off and is remembered for 180 days.

Who is responsible

voxelheroes.org is an independent guide. The contact for privacy requests is [email protected]. We do not sell personal data. We do not run a player account.

What loads by default

On a first visit the page starts Google Analytics 4, Microsoft Clarity and Adsterra before you click anything. The banner tells you and lets you withdraw. Press Reject and the choice is stored for 180 days and the page reloads to stop the running integrations; they stay off on later visits until you press Accept or use Cookie settings.

• Google Analytics 4 (GA4), measurement ID G-395XNZ7GNT, loaded from www.googletagmanager.com with measurement requests to www.google-analytics.com. It sets _ga and _ga_<container-id> with vendor default expiry of two years (browser limits may shorten this). These are first-party cookies set by the Google tag. It counts page views and traffic sources. The property data-retention setting is not published here.
• Microsoft Clarity, project zcbes9zfpa, loaded from www.clarity.ms and scripts.clarity.ms, with collection requests to regional subdomains such as b.clarity.ms (the subdomain may vary). It may set first-party _clck and _clsk cookies, and may set MUID, ANONCHK, MR, SM and CLID. It records heatmaps and session replays with form inputs masked by default. Microsoft controls the service retention; see its policy and cookie documentation below.
• Adsterra, publisher 3403020, website 6193665, units NativeBanner_1 (32223792) and SocialBar_1 (32223793), loaded from bicea.org. Adsterra and its creative CDNs may set advertising cookies and identifiers, and use them for ad delivery, frequency capping, measurement and fraud prevention. Their names and retention are controlled by Adsterra. Personalized-ad opt-outs are listed below.
• YouTube privacy-enhanced player (youtube-nocookie.com) only after you press play on a video card. Until then the page shows a poster from this domain and does not request YouTube. The player may contact YouTube, ytimg.com and googlevideo.com and can use browser storage or cookies under its own policy. Pressing play requests the embedded player.
• First-party pages, styles and images on this domain, including the fonts in /fonts/. No Google Fonts request is made.
• Ordinary outbound links to Roblox, Discord and the articles in Sources. Following a link is your request to that site.

Cookies and local storage

The site itself writes two local-storage keys, not cookies. vh-consent stores the choice and an expiry for 180 days. vh-socialbar-closed stores that you closed the Adsterra Social Bar, also for 180 days. Both are readable only on this origin. Clear site data to remove them.

Google and Clarity tags can write first-party cookies on this origin; third-party advertising and player cookies depend on the provider and browser. Our consent control does not erase existing vendor cookies. Use browser site-data controls to remove them.

Consent, default-on, GPC

With no stored choice, the scripts load and the banner appears. Accept keeps them on. Reject writes vh-consent as denied, reloads into a page without the tracking loaders or ad requests, and is remembered for 180 days. Cookie settings in the footer reopens the banner so you can change your mind. When navigator.globalPrivacyControl is true, the site stores denied and treats the visit as a rejection. Global Privacy Control is read separately from the older Do Not Track setting.

Legal basis, retention, rights

The initial Google consent signals deny ad_storage, ad_user_data and ad_personalization while analytics_storage is granted. Accept grants all four signals; Reject denies all four and stops the integrations by reloading. The default-on loading behavior is not a claim that leaving a banner untouched is affirmative consent. Retention: vh-consent and vh-socialbar-closed expire after 180 days; provider retention follows their linked policies and account settings. You can ask for a copy or deletion of mail you sent to [email protected], and you can complain to your local data authority.

Personalized advertising and opt-outs

Adsterra may personalize ads. You can opt out of personalized advertising at https://adssettings.google.com/, https://optout.aboutads.info/, https://www.youronlinechoices.com/ and https://optout.networkadvertising.org/. These are industry opt-outs, not tags on this site. Reject on this site stops Adsterra from loading here at all.

Changes

The date under the heading is the policy date. A material change, such as adding another network, updates that date and the list above in the same release.

FAQ

Do ads and analytics load before I press Accept?

Yes. GA4, Clarity and Adsterra start on the first visit. The banner is a notice and a withdraw control; Reject turns them off and remembers that for 180 days.

How long is my choice remembered?

180 days in local storage under vh-consent, or until you clear site data.

Does Clarity record what I type?

Clarity masks form input values by default. It can still record interactions such as clicks and scrolling; see Microsoft privacy documentation.