Privacy

Privacy policy

This policy lists every third party the pages actually load, the storage each one writes, how long it stays, and how to turn it off. It matches the scripts on the site on 31 October 2026; a new script means a new date here.

Last checked: 2026-10-31

What loads, and when

Three third parties start with the first page view, without waiting for a click: Google Analytics 4 (measurement id G-J961S7Y8GM), Microsoft Clarity (project z67seu09e5) and Adsterra (publisher 3403020, website 6164210). The cookie banner on a first visit is a notice, not a gate. It tells you what is running and gives you two buttons: Accept keeps the default, Reject stops all three and remembers that refusal for 180 days.

The scripts are not written into the HTML as blocking tags. The page stores their addresses as strings and creates the tags itself after the document is parsed, so the tags do not block HTML parsing. They can still affect loading and rendering performance. This is not a consent gate: with no saved choice the tags are created on that first view.

YouTube is the one exception. The trailer is a picture until you press Play; only then does the page create a player frame on the youtube-nocookie host. If you never press it, that host is never contacted. Outbound links to the App Store, Google Play or the publisher site are ordinary links and run nothing until you choose them.

There is no traffic-mesh or other banner SDK on this site, no account system, no newsletter, and no sale of personal data.

Google Analytics 4

GA4 counts page views and basic engagement: the page address, referrer, approximate location derived from the IP address, device and browser type, and a random client id. IP addresses are not stored in the reports. Analytics storage is granted by default so the property records visits; the advertising signals (ad_storage, ad_user_data, ad_personalization) stay denied until you press Accept, and Reject switches analytics off as well.

Google Analytics 4 writes two first-party cookies on bleachmirrorshigh.xyz: _ga, which holds the random client id and lasts up to 2 years, and _ga_*, which keeps the session state and lasts up to 2 years. Event-data retention depends on the GA4 property setting; this review has not independently confirmed that setting. Google describes its handling in its privacy policy.

Microsoft Clarity

Clarity records how the pages are used: clicks, scroll depth, taps, and a reconstruction of the page as you saw it, together with the browser, screen size and country. It is used to find layout problems such as a button that is hard to hit on a phone. Typed text in form fields is masked by Clarity before it leaves the browser, and this site has no form that would collect a password or a payment detail.

Clarity writes the cookies _clck (12 months, the visitor id) and _clsk (1 day, the session id), and may read Microsoft cookies such as MUID and ANONCHK on the clarity.ms and microsoft.com domains. Clarity's FAQ lists up to 30 days for recordings and up to 9 months for heat maps; individual retention depends on the service and project settings. See the Microsoft privacy statement for its processing practices.

Adsterra

Adsterra fills two placements: a Native Banner inside the article flow and a Social Bar pinned to the corner of the screen. The ad frame is served from the network's own domain (bicea.org and the Adsterra domains) and can set its own cookies there to cap frequency, measure a click and avoid showing the same creative twice. Those cookies are third-party cookies on the ad domain, with retention controlled by the network rather than this site. We have not independently confirmed a fixed expiry for those cookies, and this site cannot read them.

Adsterra does not run pop-under, interstitial or adult creatives on this site. Adult advertising is switched off on the publisher account. The Social Bar has a close button; closing it writes bmh_socialbar_closed for 180 days so it does not return on the next page.

You can limit personalised advertising from the industry pages at https://optout.aboutads.info/ and https://www.youronlinechoices.com/, and Google's own controls at https://adssettings.google.com/. Microsoft's privacy dashboard at https://account.microsoft.com/privacy covers Clarity and the Microsoft cookies above.

The keys this site writes

The site writes exactly two keys of its own, both in localStorage and both on bleachmirrorshigh.xyz. They are never sent to an ad network as a profile; they only tell this page whether to run the tags and whether you closed the bar.

bmh_consent holds the choice (granted or denied), how it was chosen and an expiry 180 days later. On a first visit with no key the page writes granted and then shows the banner, so pressing nothing keeps the default; pressing Reject overwrites it with denied and reloads the page once to tear the tags down. If the browser exposes Global Privacy Control or Do Not Track, the page writes denied instead and does not wait. The Cookie settings button in the footer reopens the banner at any time.

bmh_socialbar_closed holds {closed: true} with the same 180-day expiry when you close the Social Bar. Accept clears it, because an explicit Accept is the one action that should bring the bar back.

Storage this site and its vendors use
NameWherePurposeRetention
bmh_consentlocalStorageRemember accept or reject180 days
bmh_socialbar_closedlocalStorageRemember the Social Bar was closed180 days
_gacookie, first partyGA4 client idup to 2 years
_ga_*cookie, first partyGA4 session stateup to 2 years
_clckcookie, first partyClarity visitor id12 months
_clskcookie, first partyClarity session id1 day
MUID, ANONCHKcookie, clarity.ms / microsoft.comMicrosoft identifiers used by ClarityVendor-controlled; see privacy statement
ad network cookiescookie, bicea.org / adsterra.comAdsterra frequency cap and click measurementVendor-controlled; expiry not confirmed

Your controls and privacy requests

This site uses the default-on, opt-out behavior described above. A visit or an untouched banner is not an affirmative consent click, and this policy does not claim that displaying the banner establishes consent. Reject stops future loading of the three vendors; Cookie settings lets you change your choice. Requests about access, deletion, or objections can be sent to the contact address below.

Email you send to [email protected] is read to answer the message and kept only as long as the thread needs. You can ask for a copy or deletion of that correspondence, ask what the analytics property holds about your visit, or object to the processing, by writing the same address. The site has no account, so there is no profile to export beyond the identifiers listed above.

A material change to this policy shows a new date at the top of the page and a new paragraph here; the old statement is replaced, not hidden.

Official customize screen
Official art. ©Tite Kubo/Shueisha, TV TOKYO, dentsu, Pierrot ©Bandai Namco Entertainment Inc.

Questions people ask

Do you use cookies?

Yes. Google Analytics 4 sets _ga and _ga_*, Microsoft Clarity sets _clck and _clsk, and Adsterra sets its own cookies on the ad domain. The site's own choice lives in localStorage under bmh_consent for 180 days.

Do I have to accept before ads or analytics load?

No. They load by default on the first view; the banner tells you so and Reject turns all three off for 180 days.

Do you run ads?

One network, Adsterra, with a Native Banner and a Social Bar. Adult ads are off and there are no pop-unders.

How do I change my mind?

Use Cookie settings in the footer, then Accept or Reject. Closing the Social Bar is remembered separately under bmh_socialbar_closed.

Keep going

ContactAsk for a mail deletion here.AboutWho operates the guide.Editorial policyHow pages are written.

Sources