Privacy policy

This policy matches the scripts on vanguards.run as of 2026-10-15. The operator is Vanguards Run. Contact [email protected]. If we add a script, we will change this page and the date on it.

What actually loads

The first HTML response loads exactly one third-party script: the Google Analytics 4 tag (gtag.js, measurement id G-NYSBNPJMN7) from googletagmanager.com. Two other vendors are declared on every page but requested only after you accept, so the first response contacts neither host: Microsoft Clarity (project ID yy6kwditld) and our ad network Adsterra, whose two units arrive as an empty container plus a host name in plain text, never as a <script src>. Fonts are files we host ourselves. We do not run Google AdSense and we take no other ad network. Adsterra's publisher help center states that it does not provide ads.txt records and that its advertisers do not require them, and our dashboard shows no seller id for one, so this site publishes no ads.txt file rather than guessing a line. A Consent Mode default of denied for ad_storage, ad_user_data, ad_personalization, and analytics_storage runs before that tag loads, and ads_data_redaction and url_passthrough are set, so the tag sends no identifiers and writes no analytics cookie until you grant consent in the cookie banner.

If you press a video poster, the page then creates an iframe to youtube-nocookie.com for that video id. That is YouTube, a Google service. It can set its own cookies after you press play. We do not load it before the click. Outbound links to Roblox, the official wiki, Discord, and the changelog are ordinary navigation. They are not embedded.

YouTube's player can request resources from youtube.com, youtube-nocookie.com, ytimg.com, googlevideo.com, ggpht.com and Google service endpoints after that click. The preview thumbnails are served from this site's own origin. Playing a video is a separate request to YouTube; accepting the site's cookie banner does not load a player automatically. YouTube and Google can receive your IP address, device and player interaction data. Google Privacy Policy.

Storage

We set no first-party cookie of our own. The choice banner writes localStorage key vg-consent. The value is JSON with choice (granted or denied), ts (a millisecond timestamp), and gpc when Global Privacy Control is on. We keep that record for 180 days and then ask again. Purpose: remember that you already answered. Legal basis: your consent. If navigator.globalPrivacyControl is true, we store denied and we do not treat a later accept click as granted.

If you accept, the Google Analytics 4 tag can then set Google's own first-party cookies (_ga and _ga_*) and report pageviews to Google. If you reject, or if we never get an answer, the tag stays cookieless and no analytics cookie is written. Google Privacy Policy.

Accepting also loads Microsoft Clarity (project ID yy6kwditld) for heatmaps and session replay, so we can see where a page confuses readers. The loader at www.clarity.ms/tag/yy6kwditld pulls the SDK from scripts.clarity.ms, which reports to a *.clarity.ms collect endpoint and sets Microsoft's first-party cookies _clck and _clsk. Clarity receives your IP address, browser information and the pages and interactions you record on; it masks sensitive content such as form input by default, under Microsoft's privacy statement and this project's configured retention period. Reject never loads it; if you revoke a previous Accept with Cookie settings, the loaded tag is told to stop recording. No part of the site depends on it.

If you save a server banner observation, sessionStorage key vg-banner-observation holds the three unit names, observation time and optional rotation deadline only in that tab. Clear observation deletes it; closing the tab ends the session. This data is not sent to a server or third party.

Advertising and rights

We monetize this site with Adsterra (adsterra.com), publisher account btiger. Adult ads are switched off in the Adsterra record for vanguards.run, which is filed there under the Social category. Two units are declared on every page and both start only after you accept the cookie choice: a Native Banner (unit 31750210) that fills the container below the article body, and a Social Bar (unit 31750211) that Adsterra draws over the bottom of the viewport with its own close control. Until you accept, no bicea.org host is contacted. Reject, or revoke a later Accept with Cookie settings, and the page makes no ad request; a snippet that is already running cannot be unloaded before you reload the page.

Adsterra chooses the creatives. We send it no data we hold about you, we build no audience segments, and we do not ask it to retarget you. Adsterra sets its own cookies and storage on its own ad hosts: in a local check its snippet left pip_<hash> on bicea.org with a lifetime of about one day. That name, its lifetime and any further storage are Adsterra's, not ours, and they are third-party cookies your browser handles under its own rules. See the Adsterra privacy policy.

You can reopen the banner with Cookie settings in the footer at any time, and deleting the site's vg-consent key makes the site ask again. Google's ads settings at adssettings.google.com/anonymous and the industry page at youronlinechoices.eu cover advertising choices across the sites you visit. You can email us to ask what this policy covers, to object, or to ask for a correction. You can also complain to your local data authority. We do not run a user account database, so there is no server profile to export.

Cloudflare provides this domain's DNS and Email Routing and is the intended static hosting provider. Hosting requests may be processed for delivery and security, including IP address, user agent and request metadata. Email Routing processes mail sent to our contact address and forwards it to our operator's inbox; mail is handled by the receiving email provider. No Cloudflare Web Analytics beacon is installed. Our tags are the Google Analytics 4 tag described above — the only third-party script the first response requests — plus Microsoft Clarity and the two Adsterra units, which all stay off until you accept. Cloudflare Privacy Policy.