Privacy policy
The Hood Warfare Guide editorial team is responsible for this website and its privacy notices. This policy describes the configured services as of 13 October 2026. Contact [email protected] about website data or privacy.
Source checks
We use Cloudflare to host this site and route contact email to the team's Google Gmail mailbox; Cloudflare also injects its own Web Analytics beacon at the edge, which runs before any choice and is named below. Fonts and original illustrations, including video previews, are hosted locally; the illustrations are not game screenshots or evidence of gameplay. Google Analytics runs on every page with all four consent permissions denied, so it stores no identifier until you choose. The Adsterra advertising on this site — a Native Banner drawn inside the page and a Social Bar that floats over it — and the Microsoft Clarity heatmap and session-replay tag are not requested at all before you accept. YouTube and Steam frames load only after their separate buttons are clicked. Your consent choice is stored in hw_consent_v1 and your ad-bar preference in hw_adbar_hidden, both in your browser's localStorage.
Third parties
YouTube (Google): clicking a video facade loads a player from www.youtube-nocookie.com. Activated-player checks observed youtube-nocookie.com, www.google.com, fonts.gstatic.com, ssl.gstatic.com and jnn-pa.googleapis.com. Playback can also use youtube.com, ytimg.com and googlevideo.com for video or images. Player diagnostics and provider-managed advertising can use additional Google endpoints, including googleadservices.com, googlesyndication.com and doubleclick.net; this site does not choose or inject those player internals. These requests disclose your IP address and browser request information to the contacted Google services. The player may use cookies or other storage; the nocookie host does not mean playback makes no third-party requests.
Steam (Valve): clicking "Load Steam store" on the download page loads a widget from store.steampowered.com. Activated-widget checks observed store.fastly.steamstatic.com, shared.fastly.steamstatic.com and cdn.fastly.steamstatic.com, served through Fastly. Steamstatic resources may also be delivered through Akamai depending on the provider’s routing. Valve and these delivery providers receive the IP address and browser request information needed to serve those requests and may use their own storage. Ordinary Steam links also take you to Valve when you follow them.
Google Analytics 4 runs on every page. The tag library is served by googletagmanager.com and event collection goes to google-analytics.com with a regional subdomain such as region1.google-analytics.com. The tag is configured after the default consent state is set, so a first visit with consent denied sends cookieless, aggregated pings and stores nothing on your device. Accepting lets Google set its own identifiers and report your visit in more detail, and the same choice is what releases the Adsterra advertising described next. No advertising script is requested on the initial page: every page carries both Adsterra loader URLs as plain text inside its own script, and the ids and hosts live in src/data/ads.ts.
Microsoft Clarity (Microsoft) records heatmaps and session replays after you accept. The tag loader is served by www.clarity.ms, the recording library by scripts.clarity.ms, and recorded data goes to a collection endpoint on a changing subdomain such as a.clarity.ms, e.clarity.ms or o.clarity.ms. Clarity keeps its default masking, so text typed into form fields is not captured. Reject means the tag is never requested, so Clarity receives nothing from this site and writes none of the cookies described under Storage on your device; if you accept and then reject, the site calls clarity("consent", false) and drops the first-party identifiers Clarity set.
Adsterra (website id 6119417, category Social, and the Show adult ads switch OFF). Purpose: the advertising on this site. Adsterra supplies two units, both created by this site publisher in the Adsterra dashboard: a Native Banner (dashboard unit 31706055), drawn inside the page above the footer, and a Social Bar (dashboard unit 31706056), a floating bar anchored to the bottom of the viewport. Trigger: you press Accept. Every page carries their loader URLs as text only; the loaders are fetched from bicea.org — the delivery host Adsterra issued for these units — at the moment you accept, and never before. A page you receive without choosing makes no request to Adsterra at all, and no adult-advertising unit exists for this website.
Once an Adsterra loader runs, Adsterra’s own script requests the ad creative and may set its own cookies, or read identifiers such as your IP address, user agent and the URL of the page, to serve and measure ads. We cannot enumerate the cookie names or lifetimes Adsterra and its advertisers use: those are controlled on their side and are described in Adsterra’s privacy policy and in the opt-out links at the end of this page. Legal basis: your consent, collected through this site’s Cookie settings. Reject means no Adsterra unit is requested at all, and a Reject after an Accept removes the ad scripts that were already injected, empties the Native Banner container and drops the floating bar.
Cloudflare hosting and contact email
Cloudflare serves this website and its same-origin functions. It processes request information, including your IP address, requested URL and browser headers, to deliver and protect the service. This infrastructure processing is separate from optional analytics and is needed when you visit the site.
Cloudflare also injects its own Web Analytics beacon into the HTML of every page at the edge: the script static.cloudflareinsights.com/beacon.min.js, reporting to /cdn-cgi/rum on this domain (token 485289bc2de248079db5c283af5be6c6). Cloudflare adds that response script itself, so a visit-count request goes out as soon as a page loads — before any choice is made here, and independently of this site’s Cookie settings; the site cannot hold it back, and it is not one of the scripts this site injects. Cloudflare states that this beacon sets no cookies, does not fingerprint the browser across sites and is not used for advertising, and we read only aggregate totals from it. Legal basis: our legitimate interest in aggregate traffic measurement. It is not this site’s Google Analytics or Microsoft Clarity code, both of which stay silent until you press Accept. If you do not want it, blocking static.cloudflareinsights.com in your browser or an extension does not affect the rest of the site. Retention is governed by Cloudflare’s service policy.
Messages sent to [email protected] pass through Cloudflare Email Routing to the editorial team's Google Gmail destination mailbox. Cloudflare routes the message and Google processes and stores the forwarded correspondence. This includes sender and recipient addresses, message contents and mail headers, which can contain IP addresses. Gmail is used for correspondence and is not an embedded website script. The team receives the forwarded message to answer questions and handle corrections or privacy requests. Do not send passwords, payment details or private game-account credentials.
The player-count button
Clicking the player-count button requests /api/player-count on this same website. A Cloudflare function queries Steam for the two fixed apps, Hood Warfare (2274510) and Hood Warfare 2 (5155360), and returns aggregate concurrent-player counts with a sample time. Steam receives the function request for those app IDs.
This feature does not monitor your play, identify your Steam account or request a personal game identity. The browser request still passes through Cloudflare, which processes its IP address and request metadata as part of hosting. Aggregate game counts are not records of your own activity.
Storage on your device
The site consent control uses localStorage, not a cookie. Google Analytics sets its own first-party cookies only after you accept; while consent is denied it stores no identifier on your device. Microsoft Clarity and both Adsterra units are requested only after you accept, so the records listed below are written from that point on rather than on arrival. Third-party frames manage their own storage after you activate them.
| Key | Where | Purpose | Retention |
|---|---|---|---|
| hw_consent_v1 | localStorage | Consent choice and timestamp | 180 days |
| hw_adbar_hidden | localStorage, written by Hide ad bar in the footer | Keep the floating Adsterra Social Bar away on later visits, not only until the next refresh; Show ad bar removes the key | Until you press Show ad bar or clear site data |
| _ga and _ga_<container> | cookies on hoodwarfare.xyz, set by Google Analytics after you accept | Tell repeat visits apart and keep the analytics session consistent | Google's default, up to 2 years |
| _clck and _clsk | cookies on hoodwarfare.xyz, set by Microsoft Clarity after you accept | Keep one Clarity visitor and session identifier so heatmaps and recordings stay joined up | Microsoft's default: _clck up to 1 year, _clsk for the current day |
| Adsterra cookies and local storage | set on Adsterra and advertiser domains by the Adsterra loaders after you accept; not enumerable from this site | Deliver and measure the two ad units this site asked for | Controlled by Adsterra and its advertisers; see the Adsterra privacy policy and the opt-out links below |
Consent and Global Privacy Control
The four default consent settings, ad_storage, ad_user_data, ad_personalization and analytics_storage, are denied and are set before the Google Analytics tag is configured. ads_data_redaction is true, so advertising identifiers are stripped from the data, and url_passthrough keeps any incoming ad-click parameter in the page URL rather than depending on storage. While consent is denied, the Google Analytics tag still sends cookieless, aggregated pings; it sets no identifier. Accept grants all four categories, which lets Google Analytics set its cookies and releases the two Adsterra units and the Microsoft Clarity tag from ConsentedTags.astro — the same choice drives both, and none of those three scripts is requested before it. Reject keeps all four categories denied and loads neither. The floating Social Bar can be switched off separately with the footer control without changing this choice.
When the browser signals Global Privacy Control, we keep the consent permissions denied and load no ad or Clarity script. Cookie settings remains available in the footer and can reopen the controls. Reopening it also unloads the current YouTube and Steam iframes and removes the injected ad tags. This stops their current embedded players or widgets, but does not undo requests already sent or delete third-party cookies.
Media buttons are separate choices from Accept. A video or store widget loads only when its own button is clicked. You can delete the consent preference by clearing localStorage for this website. The stored choice expires after 180 days.
The floating ad bar, and how to turn it off
One of the two Adsterra units is a Social Bar that floats over the bottom of the page after you accept. It is clamped to the viewport so it cannot push the page sideways, the page reserves room for it so it does not cover the footer, and it is hidden while the Cookie settings panel is open. Press Hide ad bar in the footer to remove it: that choice is stored in localStorage as hw_adbar_hidden, and on later visits the Social Bar loader is not injected again — not only until the next refresh. Press Show ad bar the same way to bring it back.
Your rights and changes
Depending on where you live, you may have rights to access, correct, delete or export personal data and to object or complain to a supervisory authority. Email [email protected]. We can handle requests about messages received by the editorial team. The consent preference stays in your browser; Cloudflare, Google and Valve process service data under their own policies.
We retain contact correspondence for as long as needed to answer the request and handle related corrections or privacy questions. Provider-managed request logs and mail-routing data follow the applicable provider policies; this page does not promise a retention period we have not verified.
We update this notice and its visible date when the configured services or data handling change. Optional services added later require a corresponding policy update.
Questions
Do you sell personal data?
The editorial team does not sell contact messages or consent preferences. Adsterra serves the two ad units on this site after you accept, and no other advertising network is configured here. What Adsterra and its advertisers do with ad-delivery data is described in their own policies, linked below.
Can I stop the ads?
Reject in Cookie settings loads neither Adsterra unit nor Microsoft Clarity, and the Native Banner container stays empty. Hide ad bar in the footer removes the floating Social Bar on later visits as well, without changing the rest of your choice. The site itself has no ads before you accept.
What if I click a video or Steam widget?
The corresponding Google or Valve frame loads and can make third-party requests. Reopening Cookie settings unloads the current frames without erasing their past requests or storage.
Does the player-count button track my Steam account?
No. It returns aggregate counts for two fixed game app IDs through /api/player-count. Cloudflare still processes the website request as part of hosting.
Sources
- Google Privacy Policy — Google Analytics and an activated YouTube player.
- Microsoft Privacy Statement — Microsoft Clarity heatmaps and session recordings, requested only after you accept.
- Adsterra privacy policy — The advertising network that serves the two units on this site; explains its own data practices and opt-out route.
- Adsterra publisher help centre — Adsterra states here that it does not supply ads.txt files, which is why this site publishes the seller line itself.
- Digital Advertising Alliance opt-out — Network-level opt-out for interest-based advertising, covering many of the advertisers Adsterra serves.
- Network Advertising Initiative opt-out — Second network-level opt-out for interest-based advertising.
- Steam Privacy Policy — Valve services, including an activated Steam store widget.
- Cloudflare Privacy Policy — Website hosting, function requests, Email Routing and the Web Analytics beacon injected at the edge.
- Cloudflare Web Analytics — Cloudflare states that the beacon sets no cookies and does not fingerprint browsers across sites.
- Fastly Privacy Policy — Delivery provider observed for activated Steam widget resources.