Privacy policy
This policy covers https://cosmillion.net. The game at cosmillion.com has its own privacy page. We do not control that site.
What this site loads
Analytics, session recording and advertising load by default on the first page view. The cookie banner is a notice and a withdrawal control, not a gate: Accept keeps the default on, Reject turns the scripts off and stores that refusal for 180 days. Global Privacy Control is treated as Reject. The table lists the scripts, the storage they can set, and why.
| Name | Purpose | Host or key | Retention | Legal basis |
|---|---|---|---|---|
| Google Analytics 4 (G-HV6GMS7DYP) | Count visits and see which guides are read | www.googletagmanager.com, *.google-analytics.com; cookies _ga and _ga_HV6GMS7DYP | Up to 2 years for the cookies; event retention follows the configured Google property setting | Consent (GDPR Art. 6(1)(a)) |
| Microsoft Clarity (z7trgxdxl0) | Heatmaps and session recordings | www.clarity.ms, scripts.clarity.ms, *.clarity.ms; cookies _clck and _clsk | _clck up to 1 year; _clsk up to 1 day | Consent (GDPR Art. 6(1)(a)) |
| Adsterra (publisher 3403020) | Native Banner and Social Bar advertising | bicea.org, cdn.show-creative1.com, cdn.show-sb.com, cdn.cloudpiko.com, static.nresystems.com; identifiers vary by creative | Creative-dependent; a fixed retention period has not been independently established | Consent for advertising storage and personalised ads (Art. 6(1)(a)); legitimate interests for security, fraud prevention and aggregate measurement (Art. 6(1)(f)) |
| Consent record | Remember Accept or Reject | localStorage key cmn_consent_v1 | 180 days | Consent, and our legitimate interest in honoring a refusal |
| Social Bar close record | Keep the closed Adsterra bar closed | localStorage key cmn_socialbar_closed | 180 days | Consent, and our legitimate interest in honoring a refusal |
| YouTube embed | Play an official video after you press the thumbnail | www.youtube.com; set by YouTube after the click | YouTube’s own period | Consent, given by the click |
| Read and reply to mail you send | Message content in our mailbox; Cloudflare Email Routing delivers it to the mail-hub Worker | Until the thread is resolved, then deleted on request | Steps prior to a contract, or legitimate interest in corrections |
Fonts are files we host ourselves. There is no Google Fonts request, no traffic-mesh or other banner SDK, no popunder and no smartlink on these pages. Microsoft Clarity is the only session-recording script. YouTube is requested only after you press play, and its player then follows YouTube’s own policy.
Google Analytics 4
Every page loads gtag.js from www.googletagmanager.com and sends a page view for property G-HV6GMS7DYP to www.google-analytics.com and the regional Google Analytics endpoints. The request includes your IP address, user agent, page URL and referring page. Google processes the data for us in the United States; we see aggregate reports only. Google may set the first-party cookies _ga and _ga_HV6GMS7DYP for up to two years. Legal basis: consent. You can refuse with Reject, install the Google Analytics opt-out add-on, block googletagmanager.com, or send Global Privacy Control.
Microsoft Clarity
Every page loads the official Clarity snippet for project z7trgxdxl0 from www.clarity.ms, then scripts.clarity.ms, and sends interaction and session-replay data to *.clarity.ms. Clarity may set the first-party cookies _clck (up to one year) and _clsk (up to one day) to recognise a browser and stitch a session together. Clarity applies its masking rules, but a recording can still include pages viewed, clicks, scrolling, device and browser details, and your IP address. Microsoft processes this in the United States; we use aggregate heatmaps and recordings to improve the guides. Legal basis: consent. Press Reject or use Cookie settings to withdraw Clarity consent, or block clarity.ms.
Adsterra advertising
Adsterra (publisher 3403020, website 6171932) runs two page-level units by default. Native Banner unit 32069690 loads https://bicea.org/21/0ab5f8b0bd16d8bad29cbd1912ead951 and writes its creative into a container on the page. Social Bar unit 32069691 loads https://bicea.org/14/7baa16675aef83aecce233c8851813d7 and renders the fixed bar at the bottom of the viewport; the bar has a local close control, and the site remembers that close under localStorage key cmn_socialbar_closed for 180 days. The scripts run from bicea.org and may contact the creative and measurement hosts named in their code, including cdn.show-creative1.com, cdn.show-sb.com, cdn.cloudpiko.com and static.nresystems.com. Adsterra receives your IP address, user agent, referring page, page URL and pseudonymous identifiers used for frequency capping, fraud prevention and ad measurement.
Adsterra creatives may use cookies or browser storage for advertising identifiers. Their exact keys and retention depend on the creative and browser; we have not established one fixed list for every visitor. Legal basis: consent for advertising storage and personalised advertising (GDPR Art. 6(1)(a)), and legitimate interests for security, fraud prevention and aggregate measurement (Art. 6(1)(f)). Press Reject or Cookie settings to stop the Adsterra loader and withdraw consent. You can also use Adsterra’s privacy policy, the Digital Advertising Alliance opt-out, or Your Online Choices for network-level choices. Our /ads.txt declares only adsterra.com, publisher 3403020, DIRECT.
Your choices and localStorage keys
The site stores two first-party values in localStorage, not cookies: cmn_consent_v1 holds JSON {choice, at, exp} for 180 days to remember your banner choice, and cmn_socialbar_closed holds JSON {closed, at, exp} for 180 days when you close the Adsterra Social Bar. localStorage has no automatic expiry, so an old value can remain on disk until it is replaced or you clear it; the page checks exp and ignores an expired record. Cookie settings in the footer reopens the banner. Removing either key makes the next page view follow the default-on path again. These preferences are first-party and are not sent to an advertising network as such.
Reject turns advertising, analytics and recording off and keeps them off for 180 days; Accept reverses that. Reject withdraws consent and reloads this page immediately to stop previously executed advertising and recording code; the next document starts without those scripts. The site also disables Google Analytics measurement before its configuration runs on later visits. Global Privacy Control is treated as Reject. If you change your mind, Cookie settings brings the banner back and Accept re-enables the scripts.
YouTube and other third parties
A video card on the guide shows a locally hosted thumbnail. Pressing play replaces it with an iframe from www.youtube.com; only then does Google receive the request, and the player may set its own storage and process your IP address and browser details. YouTube is optional: use the external watch link instead if you do not want that request. The general Reject button does not block a video you separately request.
Cloudflare provides DNS and Email Routing for cosmillion.net. Mail to [email protected] is routed by Cloudflare to the mail-hub Worker mailbox; Cloudflare and the mailbox service process the sender address and message content. Do not send passwords or game account secrets. The hosting provider may process ordinary HTTP request data for delivery and security. None of these are browser-side tracking scripts.
Your requests
Email [email protected] to access, correct, or delete a message you sent us, or to object to the consent record. You can also clear the localStorage keys in your browser. You may lodge a complaint with your local data-protection authority. We will answer the mailbox.
Changes
When a third party is added or removed, this page and the checked date change in the same release. The footer link to Cookie settings stays on every page.
Questions people ask
Do you run ads?
Yes. Adsterra (publisher 3403020) serves a Native Banner and a Social Bar on every page by default. Press Reject or use Cookie settings to stop the Adsterra loader and withdraw the choice. /ads.txt declares only adsterra.com, publisher 3403020, DIRECT.
Do you use Google Analytics?
Yes. Google Analytics 4 property G-HV6GMS7DYP loads by default and may set _ga cookies. Reject, the Google Analytics opt-out add-on, or Global Privacy Control turns measurement storage off.
Do you record sessions?
Yes. Microsoft Clarity project z7trgxdxl0 loads by default and may set _clck and _clsk. Reject or Cookie settings turns recording off and withdraws Clarity consent.
How do I change my choice?
Use Cookie settings in the footer. Accept keeps the stored choice as granted; Reject stores denied for 180 days and turns advertising, analytics and recording off. The closed Social Bar is remembered separately for 180 days.
Related reading
Last checked:
Sources
- Google privacy policy — checked 2026-11-03
- Google Analytics opt-out browser add-on — checked 2026-11-03
- Microsoft Clarity privacy statement — checked 2026-11-03
- Clarity cookie documentation — checked 2026-11-03
- Google Consent Mode setup — checked 2026-11-03
- Adsterra privacy policy — checked 2026-11-03
- Digital Advertising Alliance opt-out — checked 2026-11-03
- Your Online Choices — checked 2026-11-03