Privacy policy

Who we are

The site is noomiclone.net, an independent guide. Contact email: contact@noomiclone.net. That address is listed on the contact page and in the footer of every page. We do not run a user account system.

What is stored on your device

One necessary localStorage key, nc_consent_v1, remembers granted or denied plus an expiry for 180 days. It contains no account identifier. After expiry the Clarity loader and the ad slot are off again until you choose. Cookie settings replaces the choice; clearing this site’s browser data removes it. Optional provider processing is based on consent and your play request.

This site itself writes no other cookie or storage key. Anything the ad unit sets belongs to Adsterra’s own domain, not to noomiclone.net, so this site cannot read it — see “Advertising on this site” below.

If the browser sends Global Privacy Control (navigator.globalPrivacyControl) or Do Not Track set to 1, we treat the visit as denied and do not upgrade the choice to granted. We do not sell personal data.

Measurement on this site

The head of every page loads the Google Analytics 4 tag (gtag.js, measurement id G-JGJ1K0P85F). An inline gtag queue set before it holds Consent Mode v2 defaults — ad_storage, ad_user_data, ad_personalization and analytics_storage all denied, with ads data redaction on — so the tag is present but starts in cookieless mode: no _ga cookie is written, and the cookieless pings Google receives carry no cookie identifier, until you allow measurement in the consent prompt.

Allowing measurement runs gtag('consent', 'update') with analytics_storage granted; Google then writes its first-party _ga and _ga_JGJ1K0P85F cookies, kept for Google Analytics’ default two years. Cookie settings in every footer withdraws the choice, which returns analytics_storage to denied, and a Global Privacy Control or Do Not Track signal keeps measurement denied even if you press allow. Cookies Google already wrote stay in your browser until they expire or you clear them. We read this data only to see which guides, languages and store links are used; we do not sell it and we do not use it for advertising.

Microsoft Clarity (project id yr88w77jn5) is consent-gated: it is not in the head of the page. A small local script injects the Clarity loader from scripts.clarity.ms only after you allow, and Clarity then reports to *.clarity.ms/collect. Clarity builds heatmaps and session recordings for this domain only and writes two first-party cookies, _clck (about a year) and _clsk (about a day), plus a per-browser identifier. Rejecting in Cookie settings removes the loader tag and empties the ad slot on the next page view; it does not un-send the reports Clarity already delivered. Clarity masks form input and other sensitive content by default, so keystrokes and field values are not captured. Its SDK also makes one identifier-sync request to c.bing.com, part of Microsoft’s advertising network; that request comes from Clarity’s own code and we neither read nor act on it. We read Clarity reports only to see how the guides are used; the data is not sold and is not used for advertising. Its cookies stay in your browser until they expire or you clear them.

Advertising on this site

The guide carries one ad unit: an Adsterra Native Banner (Adsterra website id 6091865, ad unit Banner_131515911). It is an in-page format that renders into a container above the footer — there is no popunder, no pop-up and no fixed bar over the content on this domain, and adult ads are switched off for this website in the Adsterra dashboard.

Like Clarity, the ad unit is consent-gated. Nothing is requested from Adsterra while the page loads: a local script holds the loader URL and injects it only once you have allowed, which is why the HTML delivered to you contains no <script src> for any ad domain. The loader comes from Adsterra’s own delivery domain (the snippet we hold uses bicea.org; Adsterra assigns and may rotate that host). Adsterra and the advertisers it serves receive your IP address, user-agent, the page URL and the ad request itself, and may set cookies or local storage on their own domains to cap how often you see an ad, measure clicks and detect fraud. Those identifiers belong to Adsterra, not to this site, so we cannot list their names and we do not read them.

The legal basis for loading the ad unit is your consent (GDPR Article 6(1)(a)), and Cookie settings withdraws it for every later page view. Adsterra’s own retention periods and its list of partners are in its privacy policy, linked below. To switch off interest-based advertising across many networks, use the industry opt-out pages linked below: the European EDAA choice page at youronlinechoices.com and the US Digital Advertising Alliance page at optout.aboutads.info. Those pages set an opt-out cookie, so they apply to the browser you use them in and are reset when you clear cookies.

No Google AdSense, no header-bidding wrapper and no second ad network run here. public/ads.txt carries no seller line: Adsterra states in its publisher help centre that it does not provide ads.txt files and that its advertisers do not require them, so there is no publisher id to declare, and a guessed seller line would be worse than none.

Third parties, only after consent and a play click

After consent and a play click, the tested game contacted itch.io (wrapper), static.itch.io (interface), html-classic.itch.zone (Unity build) and www.googletagmanager.com (itch.io’s Google tag). These providers receive your IP address, browser information and game requests, and may use cookies or storage for the game and provider analytics. Retention and international processing are governed by itch.io and Google. The Google tag inside that external frame is not the local consent queue and is not loaded by reading this guide.

After consent and a play click, the tested YouTube player contacted www.youtube-nocookie.com, fonts.gstatic.com, www.gstatic.com, www.google.com, i.ytimg.com, yt3.ggpht.com and jnn-pa.googleapis.com for the player, fonts, imagery and provider services. Video delivery or provider advertising may additionally use googlevideo.com, youtube.com or doubleclick.net; those were not observed in this test. Privacy-enhanced mode does not mean no data processing. No YouTube thumbnail or iframe is requested before consent and a play click. Cookies, retention and international transfers follow Google’s privacy policy. The guide itself loads no Google Tag Manager container and no ad script; its own Google Analytics 4 tag and Microsoft Clarity loader are the ones described under “Measurement on this site” above.

We do not load AdSense and no ad seller is declared in an ads.txt, for the reason given under “Advertising on this site” above. Heatmaps and session recordings run through Microsoft Clarity, described under “Measurement on this site” above. Fonts are the ones already on your device. Store links (Google Play, App Store, RuStore, TikTok, the Toribash site) are ordinary links. They load only if you follow them.

Rights and changes

Contact mail is routed by Cloudflare Email Routing to the site operator’s Google Gmail mailbox. These providers process sender details and message content for delivery; mail is retained as needed for your request, not used for marketing. You may request access, correction or deletion at contact@noomiclone.net and complain to your local data protection authority. Cloudflare also hosts this site, so it terminates TLS, caches pages, filters bots and keeps delivery and security logs. Cloudflare Web Analytics is enabled on this zone, so Cloudflare injects its beacon (static.cloudflareinsights.com) into every HTML page at the edge — outside this site’s own code, and before you make any choice. Cloudflare states the beacon sets no cookies and does not fingerprint visitors; it reports aggregate page views, referrers, country and Core Web Vitals. Global Privacy Control or Do Not Track does not stop it, because this site does not inject it; your browser’s tracking protection or an extension that blocks that host does. Mail providers are not scripts or automatic external requests in the guide.

When this policy changes, the date on this page and the sitemap lastmod move together. Provider requests and consent withdrawal were rechecked on 2 Oct 2026. Closing a consent prompt cancels the pending play request; accepting later in Cookie settings does not start that dismissed player.