↓ Download Free

Privacy policy

Checked 2026-10-06. Version on the official page that day: 1.0.1.

Who this policy covers

This policy is for https://helpingyourboyfriend.net/. Contact contact@helpingyourboyfriend.net. The game studio is a separate controller for anything you do on itch.io after you leave.

What the pages load

Fonts are Nunito files shipped with the site, not a Google Fonts request. An inline script sets Consent Mode defaults to denied for ad_storage, ad_user_data, ad_personalization, and analytics_storage, and it turns on ads_data_redaction and url_passthrough. That script runs first; after it, our first measurement tag loads: Google Analytics 4 with measurement id G-01SSV2L76W, which fetches https://www.googletagmanager.com/gtag/js and calls gtag config. We never set analytics_storage to granted, so it stays in cookieless mode: pings go to google-analytics.com without reading or writing analytics cookies, and no separate opt-in screen for analytics is shown. The second measurement tag is Microsoft Clarity with project id ytktzluran: pressing Allow in the cookie bar loads the official snippet from clarity.ms, which builds heatmaps of clicks, taps and scrolling and replays anonymised sessions. Reject, Global Privacy Control and an expired choice leave it unloaded, and it is never part of the first HTML. There is no ad unit.

Google / YouTube receives requests only after you allow embeds and press Play. The tested player loads youtube-nocookie.com, google.com, gstatic.com, ytimg.com, ggpht.com and googleapis.com; playback can also use googlevideo.com. The player sends its own activity logs. It does not receive our site’s localStorage consent value. itch.io, static.itch.io and img.itch.zone load only after you allow embeds and press the download card. The card runs in a script-disabled sandbox, so its Google Tag Manager code cannot execute. These providers may log IP addresses and browser details; the video provider may use its own storage or show ads. Our analytics tags are the two described above, Google Analytics 4 and Microsoft Clarity; we install no advertising tags.

localStorage, cookies, and how long they last

Key hyb-consent stores your choice (granted or denied) and a timestamp. The script deletes it after 180 days. We never receive that value on a server. Google Analytics does not set its usual analytics cookies, because analytics_storage stays denied. Microsoft Clarity is the only tag that writes cookies: after you allow recording it sets _clck, which keeps a random visitor id for up to a year, and _clsk, which groups the pages of one visit for a day. Rejecting or clearing site data leaves it without either cookie. After you allow an embed, YouTube or itch.io may set their own cookies under their policies.

If your browser sends Global Privacy Control, optional embeds and Clarity recording stay blocked even when Allow is pressed. Cookie settings in the footer reopens the choice. Reject saves a denial and removes any active frames; it cannot undo requests already sent to those providers.

What I checked

I checked the built pages against this text. The only third-party frames are the YouTube trailer and the itch.io download card, and both stay out of the first HTML until a click. Google Analytics 4 loads with the page under Consent Mode defaults set to denied, and Microsoft Clarity session recording starts only after you allow it. No ad tag is loaded. If that changes, this page changes in the same update.

Image references

Keep reading

Sources