Privacy policy
First Person Boxing is a Roblox fighting game by Can You Box?. It is not a real-life boxing manual, and it is not Untitled Boxing Game or Boxing Beta.
This policy matches the scripts in the firstpersonboxing.app build as of 2026-10-24. It names every third party the pages can load, the storage each one uses, how long it keeps it, and how to turn it off.
Last checked 2026-10-24. Editorial review 2026-10-24. Source snapshot dates are stated with each claim.
What I checked, in the order I did it
I matched this text to the loader and tags in this repository rather than copying a template. Google Analytics 4 is loaded from the document head unless a rejection is already saved; Microsoft Clarity and both Adsterra units are created by our own loader on the first page view. No other ad network, popunder, smartlink or traffic-mesh banner is installed. Discord and Roblox are ordinary external links, not embeds. Cookie names and lifetimes below are vendor documentation, not a claim that every cookie was observed in this audit.
Who we are
firstpersonboxing.app is an independent guide to the Roblox experience First Person Boxing. The site operator is the data controller and can be reached at [email protected]. There is no account system and no newsletter; the only personal data you send us is what you write in an email.
Cloudflare, the configured DNS and edge delivery provider, processes IP addresses and request metadata to deliver pages and filter attacks under their own terms. This static build does not configure a server-log retention period. Cloudflare processes these requests by default; Reject does not disable essential delivery or DNS. See Cloudflare privacy.
What loads on the first page view
| Party | Purpose | When it loads |
|---|---|---|
| This site | Pages, images, and the consent record | Every visit |
Google Analytics 4 (GA4), measurement ID G-35ZPEQVVZM | Page views and aggregate traffic reports, delivered from googletagmanager.com and measured on google-analytics.com | By default on the first page view, before you touch the banner |
Microsoft Clarity, project z2apudn3r2 | Session replay and heatmaps, delivered from clarity.ms and scripts.clarity.ms; collection may use regional *.clarity.ms hosts and Microsoft documents c.bing.com | By default on the first page view, created by our loader |
Adsterra, publisher 3403020 | Native Banner NativeBanner_1 (unit 31886901) and Social Bar SocialBar_1 (unit 31886902), delivered from bicea.org | By default on the first page view, created by our loader; adult ads are disabled in the Adsterra panel |
| YouTube (youtube-nocookie.com) | Play a cited video after you press the Play button | Click only. No YouTube request is made on first paint. |
Google AdSense, Popunder, Banner and Smartlink formats are not installed. There is no other advertising network and no traffic-mesh banner SDK on this site.
Default on, and how to reject
When you first arrive, these tools start with the page and the banner explains them. There is no accept gate and nothing waits for an Accept click. Reject reloads the page, disables GA4 measurement, and prevents the Clarity and Adsterra loaders from running. Global Privacy Control and Do Not Track apply the same opt-out immediately. The choice is stored for 180 days.
Cookie settings in the footer reopens the banner. Accept turns the tools back on; Reject turns them off again. The Social Bar also has a Hide ad bar control, and that closed state is remembered separately so the bar does not return on reload.
Because the tools load by default, data may already have been transmitted before you press Reject. Reject stops future optional loaders and measurement, but it does not retroactively erase data already sent or every third-party cookie already set.
Cookies, localStorage, and retention
| Key | Storage | Contents | Retention |
|---|---|---|---|
fpb-consent | localStorage | ads and analytics (true or false, both follow the same choice), timestamp t | 180 days, then the banner path runs again |
fpb-socialbar-closed | localStorage | Expiry timestamp written by Hide ad bar | 180 days |
_ga, _ga_<container> | Cookie, this domain | Google Analytics 4 client and session identifiers | Google documents a default lifetime of up to two years |
_clck | Cookie, this domain | Microsoft Clarity visitor identifier and preferences | Vendor/browser-controlled; not measured in this build review |
_clsk | Cookie, this domain | Microsoft Clarity session identifier | Vendor/browser-controlled; not measured in this build review |
CLID, MUID, ANONCHK, MR, SM | Third-party cookies on Microsoft domains, where permitted by the browser | Clarity identity, advertising-related identifiers and Microsoft-domain synchronization; these are names in Microsoft's cookie inventory, not all observed cookies | The cited Microsoft cookie inventory does not specify expiry times; browser and vendor settings apply |
| Adsterra and demand-partner cookies | Cookie, bicea.org and the creative domains they load | Frequency capping, fraud prevention and ad selection | Names and lifetimes depend on the creative and partner; this build cannot promise one expiry |
| YouTube player storage | Cookie / local storage, youtube-nocookie.com and related Google hosts | Player preferences and playback measurement after you press Play | Set by YouTube and Google; privacy-enhanced embedding does not mean zero collection |
Cookie names come from Microsoft's Clarity inventory and Google's GA4 cookie documentation. Actual cookies vary by browser; browser limits can shorten the GA4 defaults. Clarity masks form fields and other sensitive content under its masking settings; we do not add custom tags that would capture them. Both flags in fpb-consent follow the same choice: Reject stores false for ads and analytics and also denies analytics_storage in Consent Mode. The site itself sets no advertising cookie beyond the vendors above.
Legal basis and retention
This build uses a default-on, opt-out model for analytics, session replay and ads. Loading a page is not an affirmative consent action. Accept records permission; Reject withdraws it and disables these tools. We do not represent this implementation as satisfying prior-consent requirements in every jurisdiction. Essential page delivery and security are used to provide the guide you requested.
Vendor-held analytics, replay and advertising data follow each provider's retention settings and privacy policy. The exact account retention settings were not inspected in this static-build review. Email you send is used to answer your request and is kept only as long as needed for that thread, then deleted.
Your choices, access, and opt-outs
Use Reject or Cookie settings on this site to stop GA4, Clarity and both Adsterra units. Global Privacy Control and Do Not Track are honoured the same way.
Google Analytics opt-out browser add-on: tools.google.com/dlpage/gaoptout. Google ad settings: adssettings.google.com. Microsoft privacy choices: privacy.microsoft.com.
Personalized-advertising opt-outs: Digital Advertising Alliance, Network Advertising Initiative, and Your Online Choices. Adsterra's own policy is at adsterra.com/privacy-policy.
You can ask for access, correction, deletion, restriction, or a copy of the email thread you started with us, and you can object to a processing step that relies on legitimate interest. If you are in the EEA or UK you can complain to your authority; if you are in California you can ask us not to sell or share personal information, and use Reject to opt out of advertising-related sharing. We do not sell email correspondence. Send requests to [email protected].
The guide is not directed at children under 13. We do not ask for a birth date and we do not knowingly collect a child's email. If a parent writes, we delete the message thread.
Changes
This policy changes by editing this page and the date below. The last review is 2026-10-24. Material changes are dated here and in the page's modified time.
FAQ
Do you use cookies?
Yes. Google Analytics 4, Microsoft Clarity and Adsterra can set the cookies listed above, including analytics and advertising cookies on this site's domain. Our own preference records are fpb-consent and fpb-socialbar-closed in localStorage.
Can I turn the ads and tracking off?
Yes. Press Reject in the banner, or open Cookie settings in the footer later. That stops GA4, Clarity and both Adsterra units for 180 days. Global Privacy Control and Do Not Track do the same.
Are my form inputs recorded by Clarity?
Clarity masks form fields and other sensitive content by default. We do not add custom tags that would capture them.
Does YouTube load before I press Play?
No. The embed is a picture and a Play button; the youtube-nocookie.com player is created only after that click.
Sources
- Google Analytics opt-out — Browser add-on
- Google Ads Settings — Personalized-ad controls
- Adsterra privacy policy — Ad seller terms
- Microsoft privacy — Clarity and Microsoft identity choices
- DAA opt-out — US industry opt-out
- Your Online Choices — EU industry opt-out
- Contact — Rights requests