Privacy
Harvest Moon®: Echoes of Teradea Privacy policy
Last updated 2026-10-18. Checked against the sources below.
harvestmoon.pro carries advertising from one network, Adsterra, and it loads only after you press Accept. The same Accept turns on Microsoft Clarity heatmaps and session recordings and lets Google Analytics 4 store identifiers; Reject leaves ads and recording off. Your choice stays on this device. The trailer contacts YouTube only after you press play. Emailing us shares your message and address with the site operator and the mail providers.
What loads, and why
| Party | When | Purpose | Key or host |
|---|---|---|---|
| harvestmoon.pro | Always | Remember accept or reject | localStorage key hm_consent, 180 days |
| harvestmoon.pro | After you accept, once the fixed bar appears | Remember that you closed the bottom bar | localStorage key hm_socialbar_closed, 30 days |
| Adsterra (advertising network) | Only after you accept | Native Banner inside the page and Social Bar fixed at the bottom | Scripts from bicea.org; cookie pip_<placement hash> on bicea.org, about 6 hours |
| YouTube (Google) | Only after you click the trailer | Play the Natsume launch trailer | youtube-nocookie.com; google.com; googlevideo.com; ytimg.com; gstatic.com; ggpht.com; googleapis.com |
| Cloudflare | Every page load, and whenever you email [email protected] | Website delivery, security, the edge analytics beacon, and Email Routing | static.cloudflareinsights.com beacon injected by the edge (cookieless); request metadata; forwarded email |
| Gmail (Google) | Only when you email the site | Operator receives and replies to correspondence | Email address, message, and any attachments |
| Google Analytics 4 (Google) | Always, as a cookieless ping; storage only after you accept | Aggregate traffic measurement | analytics_storage stays denied until Accept, so no analytics cookie is written before it: _ga and _ga_T2VB7WEP22 appear only afterwards |
| Microsoft Clarity | Only after you accept | Heatmaps and session recordings | clarity.ms hosts; Clarity cookies _clck (1 year) and _clsk (1 day) |


Advertising, and how to turn it off
Adsterra is the only advertising network on this site. Publisher account 3403020 serves two formats here: a Native Banner that sits between the article and the footer, and a Social Bar pinned to the bottom of the viewport. The snippets come from bicea.org. Adsterra’s own publisher help centre states that its advertisers do not require an ads.txt file; the file this site publishes declares that one publisher account and nothing else, so no other seller is named against this inventory.
Adult advertising is switched off for this Adsterra account, and the two ad units are attached to harvestmoon.pro in the dashboard rather than to a shared placement.
Nothing from Adsterra is requested before you press Accept. The ad snippets are stored as plain strings, and the site injects them into the page only on the Accept click — so advertising scripts, ad frames, and the network cookies described above are all absent for a visitor who rejects the banner or ignores it.
The bottom Social Bar carries Adsterra’s own close control. Pressing it removes the bar; this site records that dismissal in localStorage key hm_socialbar_closed for 30 days and does not inject the bar again until that record expires. Cookie settings in the footer reopens the choice, where Reject withdraws the acceptance entirely and no ad tag is injected on the next page load.
To limit personalised advertising elsewhere, use the industry tools at the Network Advertising Initiative (https://thenai.org/how-to-opt-out/), the Digital Advertising Alliance (https://optout.aboutads.info/), or the European Interactive Digital Advertising Alliance (https://www.youronlinechoices.com/). Adsterra describes its own handling in its privacy policy at https://adsterra.com/privacy-policy/. Those opt-outs do not stop advertising from appearing; they limit the use of your data for personalisation.
Consent, GPC, and ads settings
The head of each page queues Consent Mode v2 defaults before any optional tag: ad_storage, ad_user_data, ad_personalization, and analytics_storage are denied, ads_data_redaction is true, and an update is allowed to arrive within 500 milliseconds. The GA4 tag G-T2VB7WEP22 loads against those defaults, so before you choose it sends a cookieless ping instead of writing an identifier. Accept then updates all four signals to granted and injects the Adsterra snippets and the Microsoft Clarity tag. Reject stores a denial, keeps every signal denied, and loads neither Adsterra nor Clarity. Global Privacy Control is treated as a refusal and never loads them.
The preference is JSON containing choice and ts at localStorage key hm_consent. After 180 days it is treated as expired. Cookie settings in every footer reopens the controls, where you can withdraw a saved acceptance by choosing Reject. This essential preference never leaves the browser. Local images, system fonts, and the facade thumbnail do not contact external image or font services.
Playing the trailer is a separate request to Google. The 18 October browser check observed www.youtube-nocookie.com, www.google.com, a regional googlevideo.com media host, i.ytimg.com, fonts.gstatic.com, www.gstatic.com, yt3.ggpht.com, and jnn-pa.googleapis.com only after playback was requested. These player, media, image, font, and API requests can process your IP address, browser information, playback events, and identifiers under Google’s privacy policy. Hosts may vary by region or session. Privacy-enhanced mode does not make playback anonymous. Rejecting site tracking does not prevent a trailer you explicitly choose to play from loading; reload the page to remove an active player.
The Cloudflare edge also adds its own Web Analytics beacon from static.cloudflareinsights.com to every page. That beacon is cookieless and independent of the Accept choice, because the host injects it rather than page script; it records aggregate page views. Cloudflare Email Routing forwards [email protected] to an operator-controlled Gmail inbox. Correspondence is used to address your request, not to market to you, and is retained only as long as needed to resolve the issue and meet applicable obligations. Google and Cloudflare may process data in other countries under their respective privacy terms. Microsoft Clarity session replay runs only when you accept and masks sensitive content by default. Withdrawing consent through cookie settings stops new Clarity and Adsterra loads; containers already requested by an open page can stay until you reload.
Legal basis and retention
Advertising, Microsoft Clarity recording, and analytics storage run on your consent (Article 6(1)(a) GDPR, with the ePrivacy rules on storing information on your device); the Accept button records that consent and Cookie settings withdraws it. Storing the consent preference itself is necessary to honour the request. Delivering the pages through Cloudflare, keeping the site secure, and answering a message you send us rest on the legitimate interest of operating the site (Article 6(1)(f)) and, for correspondence, on taking steps at your request (Article 6(1)(b)).
Retention is specific: hm_consent for 180 days, hm_socialbar_closed for 30 days, Adsterra’s pip_<placement hash> cookies on bicea.org for about 6 hours, Clarity’s _clck for 1 year and _clsk for 1 day, and GA4’s _ga and _ga_T2VB7WEP22 for up to 2 years once consent is granted. Adsterra and Google set their own retention for the data they receive, and their policies describe it.
To request access, correction, deletion, or objection, email [email protected]. You can clear hm_consent and hm_socialbar_closed through this site’s browser data settings, which also removes the vendor cookies listed above, and you can complain to your local data-protection authority. We do not sell personal information or share it for cross-context behavioral advertising.
We do not honor a separate Do Not Track header beyond Global Privacy Control, because browsers disagree on DNT. GPC is honored as a refusal. Policy changes are posted on this page and dated in the footer. The current date is 18 October 2026.
Source checks
This policy reflects the 18 October 2026 build: local images and fonts, one advertising network behind the Accept button, optional Microsoft Clarity recording, and a click-to-load YouTube player. Before consent the page ships no ad tag at all: the Adsterra snippets exist only as strings and are injected on Accept, so a visitor who rejects is never advertised to. Adult advertising is switched off in the Adsterra account for this site, and I do not sell personal information.
Questions this page answers
Do you use cookies?
The site’s own state is localStorage rather than cookies: hm_consent for 180 days and hm_socialbar_closed for 30 days. After you accept, Adsterra sets pip_<placement hash> cookies on bicea.org for about 6 hours, Microsoft Clarity sets _clck and _clsk, and GA4 sets _ga.
Do you run ads?
Yes. Adsterra serves a Native Banner and a bottom Social Bar, and only after you press Accept, because the snippets are injected on that click. ads.txt declares Adsterra publisher 3403020 and no other seller, and adult advertising is off.
How do I stop personalised ads?
Press Reject, or open Cookie settings in the footer and choose Reject, which keeps the ad tag out of the page entirely. For other websites, the NAI, DAA, and EDAA opt-out pages linked above limit personalisation.
What happens if I click the trailer?
The browser then loads a YouTube embed from youtube-nocookie.com and its media resources. The player processes data under Google’s privacy policy.
