Privacy policy

When optional services load

Google Analytics 4 (G-MLRE4GECRB), Microsoft Clarity (z31w03kzod) and Google AdSense are optional. Nothing from them is requested until they are allowed, with one exception: in the EEA, the UK and Switzerland, the AdSense script loads first so that Google’s consent message can be shown.

Visitors in the EEA, the UK and Switzerland see Google’s consent message, a Google-certified consent management platform that uses the IAB Transparency & Consent Framework. Ads follow your choices there, and Analytics and Clarity load only if you allow storage and measurement. Use Cookie settings in the footer to change your choice at any time.

Visitors whose browser sends Global Privacy Control see the site’s own opt-in banner. Nothing optional loads unless they press Accept.

Other visitors see a notice with a Reject button. If no choice is made, Analytics and Clarity load after the page has finished loading and ads load after your first scroll or tap. Reject turns them all off.

Google Consent Mode v2 is set before any Google tag runs: ad_storage, ad_user_data, ad_personalization and analytics_storage are denied until allowed, and ads_data_redaction is enabled. When allowed, requests go to www.googletagmanager.com, www.google-analytics.com, pagead2.googlesyndication.com and other Google ad domains, and www.clarity.ms (with scripts.clarity.ms, *.clarity.ms and c.bing.com). Requests disclose your IP address and request metadata to the receiving provider.

Storage and recipients

Our preference records use localStorage. Vendor scripts can also write cookies on this site or their domains. These are documented examples, not a promise that every cookie appears on every visit.

• ds_consent: choice and expiry, stored locally for 180 days.
• Google LLC: page views, device and referrer information. The _ga and _ga_MLRE4GECRB cookies are set only after consent; this site configures the Analytics cookie to expire after 180 days. Analytics report retention is controlled separately by the provider account.
• Microsoft Corporation: clicks, scrolling, device information and session recordings. Documented cookies include _clck (one year), _clsk (one day), CLID (one year), ANONCHK (ten minutes), MR (seven days), MUID (one year) and SM (session). These can use the site, clarity.ms and bing.com domains. Provider masking and settings affect collection. We do not ask for passwords or payment details.
• Google AdSense: Google and its partners use cookies to serve ads based on your visits to this and other sites. Google’s use of advertising cookies lets it and its partners serve ads based on those visits. You can opt out of personalized advertising in Google Ads Settings. How Google uses data from sites that use its services: policies.google.com/technologies/partner-sites. Third-party vendors and ad networks may also serve ads; see aboutads.info/choices.
• YouTube / Google: a youtube-nocookie.com iframe is created only when you click a video control. Its preview is local, with no YouTube request before the click. Playback may contact youtube-nocookie.com, youtube.com, googlevideo.com and ytimg.com and use playback storage. Privacy-enhanced embedding does not make playback anonymous. A deliberate video click requests playback independently of the advertising preference.
• Cloudflare: hosts static pages and routes contact email to our mail-hub Worker. It processes connection and security metadata and messages sent to us. Email also involves your provider and providers used for replies.

Choices, advertising and children

Reject stops optional ads, recording and Analytics measurement on this browser. It does not erase cookies set on other sites. Clearing site preferences brings the banner back. Browser privacy controls and vendor opt-out pages provide additional choices.

Ad delivery partners may use information for personalized advertising. We do not operate accounts, sell Roblox items or ask for a child’s name, age, payment details or Roblox password. Parents can contact us about a child’s information. We do not knowingly request personal information from children under 13; avoid identifying details in correction emails.

Depending on location, you may have rights to access, correct, delete, restrict or object to processing. Contact us about information we control. Where prior consent is required, optional services wait for it.

Retention, transfers and contact

Preference records expire after 180 days. Provider data has its own settings and published rules; we do not assert unverified Analytics or Clarity account retention settings. Contact messages are kept as needed to respond and handle corrections, privacy requests or legal obligations, and can be requested for deletion.

Google, Microsoft, YouTube, Cloudflare and email providers may process information outside your country. Their policies describe safeguards and legal bases. Our purposes are operating the site, answering messages, measuring use, diagnosing problems and advertising. Applicable rights and legal bases depend on jurisdiction and processing.

Write to contact@dontsplash.com and name the relevant page. Do not send passwords. This policy changes when services or behavior change.