Home / Privacy policy
CHECKED 2026-11-02
Privacy policy
Punch to Escape Guide at punchtoescape.org loads Google Analytics 4, Microsoft Clarity and Adsterra advertising by default. A banner explains this on the first visit and keeps Accept and Reject; Reject turns all three off and is remembered for 180 days. YouTube still waits for a click.
Who is responsible
The publisher is Punch to Escape Guide. The contact address is [email protected]. This policy describes this website. Roblox, Steam and YouTube are separate sites with their own policies once you open them.
Default loading, and how to say no
On a first visit, before you click anything, the page starts Google Analytics 4, Microsoft Clarity and Adsterra (Native Banner and Social Bar). The banner is a notice with two buttons, not a gate: Accept keeps the default, Reject switches analytics, session replay and ads off. The choice is written to local storage under pte-consent-v1 for 180 days, so a Reject survives a reload and a new tab. Cookie settings in the footer reopens the banner and lets you change the choice at any time. If the browser sends Global Privacy Control, the site treats that as Reject before it loads the tags.
The ad tags read the same stored choice before they start. Reject saves the choice and reloads this page to discard running vendor scripts and frames. The new page and subsequent visits skip all three loaders. Requests already sent before Reject cannot be recalled. The initial HTML holds URL strings; the site loader creates the third-party tags after reading the choice.
Google Analytics 4
- What it is: Google Analytics 4, measurement ID G-96RZJ3BDD2, loaded from https://www.googletagmanager.com/gtag/js. It counts page views and records the page path, referrer, approximate location (from the IP), browser, device type and language.
- Cookies: _ga and _ga_96RZJ3BDD2, both set on punchtoescape.org, kept for up to 2 years. Google may also set its own identifiers on google-analytics.com. The site does not send names, email addresses or message contents to GA4.
- Retention: Google controls retention of analytics data according to the property settings and its policy at https://policies.google.com/privacy. This review did not establish a project-specific retention period.
- Legal basis: your consent, recorded by the banner. On a first visit the site records granted unless Global Privacy Control is on; Reject withdraws it, and the page reloads with analytics_storage denied and skips the analytics loader.
Microsoft Clarity
- What it is: Microsoft Clarity project z7938or9u8, loaded from https://www.clarity.ms/tag/z7938or9u8 and scripts.clarity.ms, with collection requests to clarity.ms subdomains. The Microsoft integration can also request c.bing.com on the default visit. Reject stops this integration. It records heatmaps and session replays: clicks, scroll depth, mouse movement and a masked view of the page, plus the page URL, browser and device. Form fields and other sensitive text are masked by Clarity before they leave the browser.
- Cookies: _clck (kept up to 1 year) and _clsk (kept up to 1 day), set on punchtoescape.org, plus CLID and MUID set by Microsoft on clarity.ms and microsoft.com. Clarity may also use local storage and session storage for the replay session.
- Retention: Microsoft controls replay and heatmap retention according to Clarity settings and its policy at https://privacy.microsoft.com/privacystatement. This review did not establish a project-specific retention period.
- Legal basis: your consent, recorded by the banner. Reject stops the Clarity tag from being created at all.
Adsterra advertising
- What it is: Adsterra, publisher account 3403020, website 6169127. Two units are installed: Native Banner (NativeBanner_1, unit 32049547) in the content column and Social Bar (SocialBar_1, unit 32049548), the fixed bar at the bottom-right. Adult ads are switched off for this website. Scripts come from https://bicea.org and creative frames from bicea.org and the adsterra.com family of hosts.
- Cookies: Adsterra and its creative hosts may use campaign, frequency-cap and fraud-prevention identifiers and storage inside their frames. Cookie names and lifetimes were not established by this review. See https://adsterra.com/privacy-policy/ for the network policy.
- Retention: the network keeps its own logs under its policy; this site keeps no ad data of its own. The Social Bar close state is stored only in your browser, under the local-storage key pte_social_bar_closed
- Legal basis: your consent, recorded by the banner. Reject prevents the Adsterra tags from being created. Where the law allows legitimate interest for fraud prevention and frequency capping, that interest is limited to keeping the same ad from repeating; it is not used to build a profile for this site.
YouTube
A video appears as a poster image with a play button. The YouTube player, https://www.youtube.com/embed/, is not requested until you press play. After that, YouTube and Google may set cookies such as VISITOR_INFO1_LIVE, YSC and PREF, and may record the play. Their retention and controls are described at https://policies.google.com/privacy. The poster image itself is a file on this site, so the page makes no YouTube request before the click.
The keys this site stores
- pte-consent-v1 — local storage on punchtoescape.org. Value: your choice (granted or denied) and an expiry timestamp. Retention: 180 days, or sooner if you clear site data. This is the only key the site writes to remember consent.
- pte_social_bar_closed — local storage on punchtoescape.org. Value: the time you closed the Adsterra Social Bar. Retention: until you clear site data. It exists so the bar stays closed after a reload instead of coming back on every page.
- The site does not set its own first-party cookie. Third-party cookies are the ones named under GA4, Clarity, Adsterra and YouTube above.
Global Privacy Control and Do Not Track
If the browser exposes Global Privacy Control, the site treats it as Reject immediately, does not wait for a click and does not create the analytics, replay or ad tags. The older Do Not Track header is not a reliable signal across browsers, so the controls that change the stored choice are Global Privacy Control, the Reject button and Cookie settings.
Your choices and rights
- Reject or Accept from the banner, or reopen it with Cookie settings in the footer.
- Clear site data for punchtoescape.org to delete pte-consent-v1 and pte_social_bar_closed
- Ask for a copy, a correction or deletion of mail you sent, via [email protected]. You can also complain to your local data protection authority.
- Personalized advertising controls: https://adssettings.google.com/ , https://optout.aboutads.info/ , https://www.youronlinechoices.eu/ and https://adsterra.com/privacy-policy/ . This site does not ask Adsterra to personalize ads for its visitors, and adult ads are off.
- Microsoft Clarity controls and Microsoft privacy choices: https://privacy.microsoft.com/privacystatement and https://account.microsoft.com/privacy .
- YouTube's own controls apply after you press play: https://policies.google.com/privacy .
If you email [email protected], the message contains whatever you put in it, including your address. The mailbox is used to answer and to correct a page. The working copy is deleted after the correction is handled. Do not send account passwords or Roblox session secrets.
Children
The guide does not ask for a date of birth and does not build profiles. Roblox accounts are governed by Roblox. If a parent believes a child emailed this site, write to [email protected] and the message will be deleted.
Changes
When a third-party script is added or removed, this page gains or loses a named row for it and the checked date changes. The date on this page is 2026-11-02.
![Site icon taken from the [CH3] Punch Walls To Escape game icon.](/media/ch3-icon.webp)

Questions
Does this site load ads and analytics before I click Accept?
Yes. Google Analytics 4, Microsoft Clarity and Adsterra load on the first visit by default, and the banner explains that. Press Reject to turn all three off; the choice is remembered for 180 days under pte-consent-v1.
How do I withdraw the consent choice?
Use Cookie settings in the footer and press Reject, or clear site data for this origin. Reject is stored for 180 days under pte-consent-v1 and the ad tags read it before they start.
Does the site show adult ads?
No. Adult ads are switched off on the Adsterra website that carries the two units used here.
Related
Sources
- Google Privacy Policy — checked 2026-11-02
- Google Ads Settings — checked 2026-11-02
- Microsoft Privacy Statement — checked 2026-11-02
- Adsterra Privacy Policy — checked 2026-11-02
- DAA opt-out — checked 2026-11-02