Home › Privacy
Effective 2026-10-23 · Last verified 2026-10-23
Independent fan guide. Not affiliated with JakeHub, Metater, or Jatater Worldwide.
Privacy policy
This policy describes scamwithyourfriends.xyz only. It does not describe Steam, Roblox, or the game. Contact [email protected] for a privacy request. The game’s own policy is on the publisher’s site.
What I checked
On a first visit with no consent record, I load Google Analytics 4, Microsoft Clarity, and Adsterra immediately. The banner tells you that and lets you turn them off. Pressing Reject stops future requests, removes the Clarity and Adsterra tags, denies GA4 storage, and stores the rejection for 180 days. A saved rejection also prevents GA4 from being requested on later pages.
What loads by default
On a first visit with no saved choice the page requests Google Analytics 4 (measurement ID G-HXXNLE22HR), Microsoft Clarity (project z1zxjrv7ih), Adsterra (publisher 3403020, Native Banner and Social Bar units), and Google Fonts. These requests happen before you touch the banner. The banner is a notice and a withdrawal control, not a permission gate. A prior rejection suppresses the three consent-controlled services; Google Fonts remains a presentation dependency.
If you press Reject, the page removes the Clarity and Adsterra tags, tells Google Analytics to deny analytics and advertising storage, and writes the choice to localStorage for 180 days. It then reloads to unload already-executed vendor code. An already-started network request cannot be recalled, but no later page view requests GA4, Clarity, or Adsterra while that rejection is valid. If you press Accept, the same scripts stay on and the choice is stored for 180 days. The footer’s Cookie settings button reopens the banner so you can change either choice.
Google Analytics 4
GA4 is loaded from www.googletagmanager.com with measurement ID G-HXXNLE22HR. It sends page views, approximate location derived from IP, device and browser information, and interaction events to Google. Purpose: aggregate traffic measurement. The site defaults to loading until Reject; this setting alone does not demonstrate an affirmative Accept action.
GA4 may set first-party _ga and _ga_<container> cookies on this site to distinguish visitors and sessions, normally with up to two-year expiry subject to browser restrictions. Collection uses www.google-analytics.com and regional Analytics endpoints. Standard GA4 properties offer user/event retention settings of 2 or 14 months; we have not independently verified the selected value for this property and do not promise a 14-month period. Aggregated reports have different rules. See https://policies.google.com/privacy and https://support.google.com/analytics/answer/6004245.
Microsoft Clarity
Clarity loads from www.clarity.ms with project ID z1zxjrv7ih, scripts.clarity.ms, and collector subdomains such as a.clarity.ms. It sends pseudonymous session replay and click/scroll data to Microsoft for usability analysis. Pseudonymous does not mean fully anonymous. This site requests it by default until Reject; a default-on record is not evidence of explicit permission under every jurisdiction.
Clarity may set first-party _clck and _clsk and third-party CLID, MUID, ANONCHK, MR or SM, depending on browser restrictions and Microsoft consent handling. Microsoft masks input fields, but not necessarily every visible page element. Microsoft states recordings are retained for 30 days, with favorites and selected samples retained up to nine months. Effective cookie durations depend on settings; we have not audited every lifetime. See https://privacy.microsoft.com/privacystatement and https://learn.microsoft.com/clarity/setup-and-installation/privacy-disclosure.
Adsterra advertising
Adsterra loads from bicea.org using the configured snippets (publisher 3403020). Native Banner unit 31874832 is in-page; Social Bar unit 31874833 uses a fixed, locally constrained frame. Adult ads are disabled in the saved configuration. Purpose: sponsored links to fund this guide. These requests start by default and stop after Reject.
Adsterra and its advertisers may set third-party cookies or read device signals. Delivery hosts, campaign cookies and retention can vary; we have not verified a fixed cookie inventory. The requests disclose IP address, user agent, referring origin or URL as permitted by browser policy, and approximate location. Adsterra and its partners set retention. See https://adsterra.com/privacy-policy/.
Advertising loads by default; whether a particular ad is personalized depends on the provider and available consent signals. You can use https://adssettings.google.com/, https://optout.aboutads.info/, https://www.youronlinechoices.com/, or https://optout.networkadvertising.org/ for participating networks. Those controls do not delete this site's consent record. The Social Bar close button stores swyf_social_closed for 180 days so that bar does not return on the next page; it does not disable the native unit.
Storage on this device
localStorage key swyf_consent stores choice (granted or rejected) and exp (expiry timestamp) for 180 days. With no saved choice or browser privacy signal, code records granted and shows the notice; this is a default state, not proof you clicked Accept. Reject replaces it with rejected. Our banner uses localStorage, while embedded analytics may set first-party cookies on this origin.
localStorage key swyf_social_closed holds a JSON object with closed: true and exp. Purpose: keep the Adsterra Social Bar closed for 180 days after you press its × button. Clearing site data removes both keys and the banner returns.
Global Privacy Control. If navigator.globalPrivacyControl is true, the consent script stores rejected and does not load the three tags. Do Not Track. If the browser sends doNotTrack of 1, the same rejected record is stored. The banner can still be reopened from Cookie settings in the footer.
Other requests and links
Google Fonts. The pages load a stylesheet from fonts.googleapis.com and font files from fonts.gstatic.com (Luckiest Guy, Oswald, IBM Plex Mono). Google receives your IP address and the page URL as part of that request. Purpose: display type. No cookie is set by the font request. Google’s policy is at https://policies.google.com/privacy.
Steam widget. The download and Russian download pages create an iframe to store.steampowered.com only after you press Load Steam widget. Valve then receives the request. Purpose: show the official purchase card. Sandbox allows scripts, same origin, popups, and forms so checkout can open. It does not allow top navigation.
Announcement trailer. A click creates a video element and, on browsers that cannot play HLS natively, loads hls.js 1.5.15 from cdn.jsdelivr.net so it can read the playlist at video.akamai.steamstatic.com (Steam movie 257414252). jsDelivr, Akamai, and Valve receive that request, including your IP. Purpose: play the store trailer. The thumbnail is a file we host, so nothing is fetched from those hosts until you press Play. YouTube links open only when you click them; no YouTube iframe is embedded.
Your rights and changes
You can ask for access, correction, deletion, or a copy of the mail you sent us. You can object to the consent record by pressing Reject, clearing swyf_consent and swyf_social_closed, or using Cookie settings. Email [email protected]. We keep correspondence only as long as needed to answer and to document a correction. If you are in the EEA or UK you may complain to your supervisory authority.
This policy changes with its visible date. Newly integrated direct services will be named here before release. Advertising providers can use changing delivery partners; this is not a guarantee that every auction has the same host list. Default-on describes the implementation, not a worldwide legal-compliance claim. We do not knowingly seek personal information from children; a parent can contact us about a child's data.
FAQ
Do you use cookies?
Our banner stores swyf_consent and swyf_social_closed in localStorage. GA4 and Clarity may set first-party cookies on this origin; advertising and Microsoft services may set third-party cookies. Google Fonts is a presentation request, not cookie-based analytics.
Do you run ads?
Yes. Native Banner and Social Bar load by default (publisher 3403020); adult ads are disabled in the saved configuration. Reject disables both for 180 days. Closing only the Social Bar leaves the native unit on.
How do I withdraw?
Press Reject on the banner, use Cookie settings in the footer, or clear site data for scamwithyourfriends.xyz. Reject removes the Clarity and Adsterra tags and denies analytics and advertising storage for 180 days.
Is my typing recorded?
Clarity masks form fields and other sensitive content by default. The site does not ask for passwords or payment details, and the only message channel is email.