FARFLUNG

Privacy

Privacy policy

Updated 23 October 2026. This notice describes the site configuration, including default-on measurement, recording and advertising. Contact [email protected] for a privacy request.

Evidence and scope

The providers and identifiers below match this release. The banner does not hold scripts until acceptance: a first visit starts the listed scripts and displays a choice. A default setting is not a statement that you have actively consented. We do not claim that this configuration by itself satisfies every jurisdiction’s consent requirements.

Operator and scope

The editors of farflung.run operate this independent guide at https://farflung.run. Email [email protected]. We are not Farflung LLC. The official game at farflung.game is a separate service with its own policy.

The pages are static. Fonts and decorative artwork are hosted with the site. There is no Google Fonts call, tag manager, third-party consent platform, hosted video player, contact form or account system. Links to other websites do not load those sites until you follow them.

Default loading, Reject and Cookie settings

Without a stored choice, Google Analytics 4, Microsoft Clarity and both Adsterra placements load by default, while the banner remains visible. This can send information to these providers before you choose. Accept saves granted. Reject saves denied for 180 days, sends denied consent signals, disables the analytics tag and reloads the page to destroy vendor timers and frames. No optional vendor script is requested on that reloaded page or subsequent pages while the refusal remains valid.

Cookie settings in every footer reopens the banner. Accept enables the scripts again. Expired or invalid choices return to the default-on state and display the banner again. Global Privacy Control and Do Not Track are treated as a refusal. Requests already sent before rejection cannot be recalled. Reject does not clear your browser’s cookies or log you out of unrelated sites.

The site stores ff_consent in localStorage with your choice and timestamp (180 days), and ff_socialbar_closed when you close the ad bar (until site data is cleared). A first visit without a choice does not create a consent record. Clearing this origin’s storage removes these preferences.

Google Analytics 4

Measurement ID: G-E0D19CWRSZ. The script is requested from www.googletagmanager.com; measurement may use google-analytics.com and analytics.google.com subdomains. It measures page views and guide usage. Requests may include page URL, browser/device information, IP address and analytics identifiers.

Consent Mode v2 defaults are issued before config: ad_storage, ad_user_data and ad_personalization are denied; analytics_storage is granted. ads_data_redaction is enabled. The default-on/Accept branch updates all four consent signals to granted; Reject updates all four to denied and stops further tag loading. These technical signals are not a substitute for affirmative consent where it is required.

Google may set _ga and a property-specific _ga_ cookie, with documented default expiry of two years that can be changed in the property. We do not assert an unverified property retention setting. See Google’s cookie and retention documentation; its browser opt-out and Ads Settings are linked below.

Microsoft Clarity

Project ID: z202w5q57u. The tag loads by default from www.clarity.ms, with scripts and collection on clarity.ms subdomains. Clarity provides heatmaps and session replay, which can include clicks, scrolling, page content, browser information and identifiers. Its tag may contact c.bing.com and use Microsoft identifiers. This site does not send typed contact messages to Clarity because it has no contact form.

Microsoft documents _clck and _clsk first-party cookies and possible CLID, ANONCHK, MR, MUID and SM cookies on Microsoft domains. Cookie availability and lifetime depend on the browser and vendor configuration; they are not promises that every cookie is set on every visit. The loader passes ConsentV2 granted on the default-on/Accept branch and denied on Reject, followed by a reload with no Clarity tag. Vendor retention and rights are described in Microsoft’s policy.

Adsterra advertising

Publisher 3403020, website 6143458. NativeBanner_1 (unit 31874842) and SocialBar_1 (unit 31874843) are requested by default from bicea.org. They are not held until acceptance. Reject prevents both ad scripts from loading after the page reloads. The adult-ad option is disabled in the saved integration configuration.

The advertising provider may process IP address, browser/device information, page context and advertising identifiers for delivery and measurement, and may use cookies or storage on its advertising domains. Names and duration can change; we do not invent cookie names. The site CSP restricts network access to the declared hosts and does not allow arbitrary advertising partner domains. Adsterra’s privacy notice and cross-industry opt-out services are linked below.

Closing the Social Bar remembers only that placement’s close preference; it is not equivalent to Reject. Use Cookie settings then Reject to stop all optional scripts. Ads are labelled and are not game controls.

Hosting, email and security

The planned deployment uses Cloudflare for delivery and security. On the deployed site, Cloudflare may process IP addresses, request logs and security identifiers. A security cookie such as __cf_bm is conditional on enabled Cloudflare services, not a claim that it is currently set by this static build. Cloudflare Email Routing forwards [email protected] to the operator’s destination mailbox. Email messages include the address and information you send.

No YouTube or other video embed is included in this release. Merely reading a page does not request a video provider. External source links are ordinary links, not embedded trackers.

Your choices and requests

Use Cookie settings then Reject for the site-level opt-out. Provider opt-out tools are additional choices: Google Analytics browser opt-out, Google Ads Settings, Microsoft privacy controls, DAA and NAI. Providers may process data outside your country under their own policies.

Email [email protected] to request access, correction, deletion or a copy of information you have sent to the site, or to raise an objection. Depending on your location, additional rights and a right to complain to a data-protection authority may apply. We do not run an account database or directly sell contact messages. Advertising providers’ processing is explained in their own notices; we do not promise that removing a script erases data they already received.

Keep going

Contact Privacy requests and corrections. Editorial policy Sources, checks and corrections.

Sources

By farflung.run editors. Published . Checked .