Last verified: 2026-10-01
Privacy policy
I wrote this policy against the scripts that are actually in the site, not against a template. On 1 October 2026 the pages load Google Analytics 4 under Consent Mode with storage denied by default; the Microsoft Clarity session recorder is requested only after you allow measurement, and no ad network is present.
Who is responsible
The operator of dressmaker.run. Email [email protected]. The game itself is sold by Valve on Steam. Steam's privacy policy covers a purchase. This policy covers this website.
What the pages load
- Google Analytics 4 is the only measurement tag, loaded from googletagmanager.com with measurement id G-65RG7WSK2P. The inline consent script sets Consent Mode defaults to denied before that configuration call, so analytics storage starts denied: the tag runs cookieless and writes no identifying analytics cookie until you allow measurement.
- Before a choice is made, or after rejecting it, Google Analytics 4 sends cookieless pings: measurement requests to google-analytics.com without an identifier stored on your device.
- Microsoft Clarity is the only session recorder and it is not in the initial HTML: no request to clarity.ms is made, and no recording, heatmap, or click data leaves the page, until you press Allow. When you allow measurement the loader is requested from clarity.ms and the recorder runs from scripts.clarity.ms, sending interaction data to clarity.ms/tag/yqwjuwc4u5 (project id yqwjuwc4u5). Clarity masks form inputs and other sensitive content by default; its collector is Microsoft, so the Microsoft privacy statement applies to that data.
- Fonts are files shipped with the site, not a Google Fonts request.
- Screenshots and thumbnails are files on this host.
- If you press play on a video, the browser then requests youtube-nocookie.com for that iframe. Nothing from YouTube is requested before the click.
- YouTube is provided by Google. Its privacy-enhanced player may also fetch scripts, images, and video from youtube.com, ytimg.com, ggpht.com, googlevideo.com, gstatic.com, google.com, and googleapis.com after playback is requested. Pressing play requests that external service; it is not a first-party video.
Hosting and email
The domain uses Cloudflare for DNS and Email Routing, forwarding messages sent to [email protected] to the operator's inbox. The deployment target is Cloudflare Pages: its delivery and security infrastructure can process IP addresses, request URLs, timestamps, and browser information when serving the site. No Cloudflare Web Analytics beacon or tracking pixel is included in the site code. Cloudflare's privacy policy applies to that infrastructure.
Cloudflare privacy policy and Google privacy policy describe these providers. Store and social links are ordinary links, not widgets; clicking them leaves this site.
Storage
Key dressmaker-run-consent in localStorage stores granted or denied plus a timestamp. It is kept for 180 days and is not sent to a server by this site. The site sets no cookie of its own. If you allow measurement, Google Analytics 4 writes its own first-party cookies on this domain (_ga and _ga_65RG7WSK2P) with Google's default lifetimes, and Microsoft Clarity writes _clck (about a year) and _clsk (a day). Withdrawing or rejecting measurement deletes the identifying _ga cookie; the stream cookie can remain as a consent-state record without a user identifier. Rejecting also means the Clarity loader is never requested, so its cookies are never created; a session already sent, and the tag already loaded in the open tab, cannot be recalled until the page is reloaded. If navigator.globalPrivacyControl is true, or Do Not Track is 1, the choice is written as denied.
Legal basis and rights
The remembered preference updates Consent Mode: allowing measurement lets Google Analytics 4 store its identifiers and requests the Microsoft Clarity session recorder, rejecting it keeps the tag in cookieless mode and never requests that recorder, so no ad or recording id is created at all. Video playback is requested separately by pressing play. Cookie settings lets you reject or change the preference; rejecting also removes an active YouTube iframe, although it cannot recall data already sent to Google or Microsoft. GPC and DNT keep the remembered preference denied. Email [email protected] for access, correction, or deletion of correspondence held by the operator. You may also complain to your local data-protection authority.
Ads
No ad network is enabled, before or after a privacy preference is accepted. Google Analytics 4 is the only measurement tag and it does not serve ads. Microsoft Clarity is the only session recorder, it does not serve ads, and it loads only after you allow measurement. No seller is declared in ads.txt. Any future integration requires an updated policy and a new consent audit before it is enabled.
Changes
A change is an edit to this page and a new date in the line above. The date matches the sitemap lastmod for this URL.
Source: Contact. Questions about this policy go to [email protected].
Questions people ask
Do you use cookies?
The site sets no cookie of its own. The consent choice is in localStorage under dressmaker-run-consent for 180 days. If you allow measurement, Google Analytics 4 adds its own _ga cookies and Microsoft Clarity adds _clck and _clsk.
Do you record my session?
Only if you allow measurement. Before that, nothing is requested from clarity.ms and no recording exists. Clarity masks form fields and other sensitive content by default.
Do you sell data?
No. There is no ad seller declared, because no ad script is loaded.