PokeSpire Play free
Menu

Effective 2026-10-28

Privacy policy

This policy matches the scripts on the site as of 2026-10-28. Google Analytics 4, Microsoft Clarity and Adsterra load on the first screen. The notice lets you Reject them, and that choice is remembered for 180 days.

Checked 2026-10-28 · build 20070350 · Play now

PokeSpire title screen with New run and a Pokédex counter at 0 of 151.
Screenshot: barbecue-citrus-varmint / itch.io. Title screen. Checked 2026-10-28.
Cyndaquil fighting Sentret. Energy reads 2 of 3, Draw 5, Discard 1, catch chance 54 percent.
Screenshot: barbecue-citrus-varmint / itch.io. Battle UI. Checked 2026-10-28.

What I checked

I checked the built HTML: the ad and recording tags are created by our own loader, so no advertising <script src> is in the initial HTML. The head starts Google’s gtag.js and Clarity at runtime; the body starts both Adsterra units inside sandboxed ad frames on first visit. No Play click is required for those requests.

The Adsterra reference in this repository is publisher 3403020, website 6156673, with Adult ads turned off. Native Banner and Social Bar are the only formats in use.

Who we are

PokeSpire.net is an independent guide to the browser card game PokeSpire. The data controller and contact point is [email protected]. We are not the game’s developer and we do not operate the itch.io store page.

Default on, and how to turn it off

A first-time visitor is treated as granted: Google Analytics 4, Microsoft Clarity and Adsterra are requested on the first screen without waiting for a click. The banner is a notice and a withdrawal control, not a gate. Reject stops those three for this browser and stores the denial for 180 days; Accept keeps them on. The footer’s Cookie settings button reopens the banner so you can change your mind.

Global Privacy Control (GPC) is treated as Reject, including when a previous preference exists. Reject saves the preference and reloads this page to terminate running third-party code; saved Reject prevents all three loaders on subsequent pages. The preference is one localStorage record, pokespire_consent, containing the choice, a timestamp and a schema version. It never contains an account id or an advertising id.

If you clear site data for pokespire.net, the record is gone and the next visit is treated as a new visitor: the notice appears again and the default-on behaviour applies until you Reject.

KeyWherePurposeRetention
pokespire_consentlocalStorage on pokespire.netStores granted or denied, the timestamp, and schema version v1 so the notice is not repeated and the loaders know whether to stop.180 days from the click; an expired record is ignored and the next explicit choice replaces it
pokespire_socialbar_closedlocalStorage on pokespire.netRemembers that you closed the fixed Social Bar so it does not reappear on the next page view or reload.180 days from the close, then the bar may return

This notice describes the default-on implementation; displaying the notice does not itself record an explicit Accept. Only pressing Accept or Reject records that choice. The preference record is used to respect that choice.

Google Analytics 4

We use Google Analytics 4 (measurement ID G-T5N5NPBRFX) to count page views and see which guides are read. Google receives the page URL, referrer, approximate location derived from IP, device and browser information, and interaction events. We do not send names, email addresses or account ids to Google. IP addresses are not stored in GA4 reports.

The GA4 tag may set the following first-party cookies on pokespire.net. The advertising consent signals initially default to denied and analytics_storage to granted, before any config call; our default-on preference then updates the signals. Reject disables this tag. See Google’s GA4 cookie documentation.

CookieSet byPurposeRetention
_gaGoogle Analytics 4Distinguishes browsers so repeat visits are counted once.Up to 2 years
_ga_<container-id>Google Analytics 4Keeps the session state for this property.Up to 2 years

Opt out of GA4 with the Google Analytics opt-out add-on, or press Reject. Google’s privacy policy is at policies.google.com/privacy.

Microsoft Clarity

We use Microsoft Clarity (project z4neby8tra) for heat maps and session recordings. Clarity records clicks, taps, scrolling, mouse movement, page URLs and limited device/browser details. Form inputs are masked by default; we do not ask Clarity to capture text you type. Recordings are used to find confusing layouts, not to identify people.

Clarity may set first-party cookies on pokespire.net and may read the Microsoft `MUID` cookie on Microsoft domains. The table lists names from Microsoft’s cookie documentation (single provider source, checked 2026-10-28). That page does not give fixed retention durations; those cells remain unverified.

CookieSet byPurposeRetention
_clckMicrosoft ClarityPersists the Clarity user id and preference across visits.Not verified; controlled by Microsoft
_clskMicrosoft ClarityJoins page views into one recording session.Not verified; controlled by Microsoft
CLIDMicrosoft ClarityIdentifies a first-time Clarity visitor on Microsoft domains.Not verified; controlled by Microsoft
MUIDMicrosoftMicrosoft user identifier used by Clarity and other Microsoft services.Not verified; controlled by Microsoft
ANONCHKMicrosoft ClarityIndicates whether MUID is transferred to an advertising identifier; Clarity documents a value of 0.Not verified; controlled by Microsoft
MRMicrosoft ClarityIndicates whether to refresh MUID.Not verified; controlled by Microsoft
SMMicrosoft ClaritySession marker used while a recording is active.Not verified; controlled by Microsoft

Microsoft’s privacy statement is at privacy.microsoft.com/privacystatement. Microsoft controls retention and may retain selected recordings longer; see Clarity’s current FAQ for its retention schedule. Press Reject to stop the Clarity tag on this browser.

Adsterra advertising

We use Adsterra (publisher id 3403020, website 6156673) to show a Native Banner inside the page and a Social Bar fixed to the bottom of the viewport. Both units run in sandboxed frames that cannot change the guide’s parent document. Adsterra and its demand partners may set cookies and read device information to cap frequency, measure clicks and, where permitted, personalise ads. Adult ads are turned off for this website; only Native Banner and Social Bar are enabled, with no Popunder, Banner or Smartlink unit.

The Social Bar is wrapped in a sandboxed, locally constrained container and can be closed with its Hide ads button. Closing it stores pokespire_socialbar_closed for 180 days, so it stays closed across reloads and later pages until that record expires. The Native Banner is a normal page block and scrolls with the content.

Cookie or keySet byPurposeRetention
Adsterra cookies (names vary by demand partner)Adsterra and its partners on bicea.org or the creative’s domainFrequency capping, fraud prevention, click measurement, and personalised advertising where allowed.Set by the partner; no fixed duration verified
pokespire_socialbar_closedlocalStorage on pokespire.net (our loader)Remembers that the fixed Social Bar was closed.180 days

Opt out of personalised advertising with Your Online Choices, DAA WebChoices, NAI, or Google Ads Settings. Adsterra’s own policy is at adsterra.com/privacy-policy. Reject stops our loader from requesting either unit on this browser.

YouTube and itch.io players

Some guide pages include a YouTube facade. No YouTube request is made until you press Play video; then an iframe to youtube.com (or youtube-nocookie.com where the embed uses it) is created. YouTube may set VISITOR_INFO1_LIVE, YSC, PREF and CONSENT cookies on its own domains, with lifetimes set by Google. We do not receive those cookies. Google’s privacy policy applies.

The homepage Play button creates an iframe to itch.io’s embed player (itch.io and html-classic.itch.zone). itch.io may set its own cookies, and the game keeps its save in localStorage on the itch.io origin. We cannot read that save and clearing data for itch.io removes it. Pressing Play is your request to load that player; it is not required to read the guide.

Other third parties

Default requests include Google Analytics 4 (www.googletagmanager.com and www.google-analytics.com), Microsoft Clarity (www.clarity.ms, scripts.clarity.ms and the regional *.clarity.ms collection endpoints), and Adsterra (bicea.org). In our 2026-10-28 local browser measurements the advertising loaders also requested static.nresystems.com, cdn.show-creative1.com, cdn.show-sb.com and cdn.cloudpiko.com. These downstream advertising resources load by default and Reject disables their parent loaders. Ad creatives and collection hosts can vary; newly observed hosts are recorded here during review. YouTube and itch.io players load only after their Play button is used. We do not run Google AdSense, Taboola, Outbrain, traffic-mesh, a push-notification SDK, a pop-under network or a social embed widget. If that changes, this page will name the new party before the tag ships.

Our host may keep standard server access logs (IP address, user agent, requested path, timestamp) for security and capacity. Those logs are not combined with the analytics or advertising identifiers above.

Your rights and changes

You can ask what preference this site would store (it lives only in your browser), object to processing, request deletion of server logs that contain your IP address, or ask a question about this policy. Email [email protected]; we aim to answer within 7 days. You also have the right to complain to your local data-protection authority.

We change this page by editing it and updating the date above. A material change — a new third party, a new cookie, or a different default — will be described in the first paragraph and the effective date will move. The consent record’s schema version is bumped when its meaning changes, and the loader rejects records with an unsupported version.

Keep reading

Sources