Halloween event guide · checked 24 Oct 2026
RAS Play Roblox · Free

Privacy policy

Last checked 2026-10-24. Unofficial fan guide; not affiliated with Ultrain Studios or Roblox.

Google Analytics 4, Microsoft Clarity and Adsterra ads load by default on the first view. Reject stops all three and is remembered for 180 days. YouTube starts only when you press play.

Contact
[email protected]
GA4 / Clarity
G-HX12C4NT68 · z2bjb96bd7
Choice retention
180 days
Ads
Adsterra, adult off
Official Roll A Stickman icon: a purple-robed stickman wizard with a pumpkin staff
Image: Ultrain Studios, via Roblox game icon (Halloween 2026 art).
Official Roll A Stickman thumbnail: a blue-shirt player stickman in front of a black-and-gold army
Image: Ultrain Studios, via Roblox thumbnails (checked 2026-10-23).

This policy matches the consent-aware loaders reviewed on 24 October 2026. GA4 measurement ID G-HX12C4NT68, Clarity project z2bjb96bd7 and Adsterra publisher 3403020 load by default. Reject reloads the page without these integrations; their script tags are created at runtime only when allowed.

Who we are

Roll A Stickman Net publishes https://rollastickman.net/. Privacy mail goes to [email protected]. We do not sell personal information. The game itself is run by Ultrain Studios on Roblox, and their privacy policy applies once you leave for roblox.com.

There is no account, checkout, newsletter or contact form on this site. The only first-party choice we store is the consent record and the Social Bar close flag described below.

Which third parties load, and when

This is a default-on site. With no valid saved choice, Google Analytics 4, Microsoft Clarity and Adsterra start on the first page view, before you touch the banner. The banner is a notice with a withdrawal control, not a gate that holds the tags back.

Accept records that the integrations should stay on. Reject records a refusal for 180 days, denies analytics and advertising storage, asks Clarity to stop and reloads the page to unload vendor timers and frames. The new page and later visits do not request GA4, Clarity or Adsterra while that refusal is valid. Data already sent before the click cannot be recalled, and a request already in flight may finish.

Global Privacy Control (navigator.globalPrivacyControl) and Do Not Track (navigator.doNotTrack === "1") are treated as Reject. YouTube is separate: its iframe is created only when you press Play, so a normal page view does not contact YouTube.

Party and hostWhen it loadsPurposeStorage it may use
This site (rollastickman.net)Every visitRemember your choice and whether you closed the Social BarlocalStorage ras-consent, ras_adbar_closed; both 180 days
Google Analytics 4 (G-HX12C4NT68): www.googletagmanager.com, www.google-analytics.comBy default, unless a saved Reject or GPC/DNT appliesPage and event measurement, traffic sources, approximate location from IP, browser and device informationFirst-party _ga and _ga_<container> cookies; Google-side logs
Microsoft Clarity (project z2bjb96bd7): www.clarity.ms, scripts.clarity.ms, *.clarity.ms/collectBy default, unless a saved Reject or GPC/DNT appliesHeatmaps and session replay of clicks, scrolling and page interaction; URLs, browser and device informationCookies such as _clck and _clsk; identifiers such as CLID and MUID
Adsterra (publisher 3403020; Native Banner unit 31888000, Social Bar unit 31888001): bicea.org and provider-controlled delivery hostsBy default, unless a saved Reject or GPC/DNT appliesAdvertising delivery, frequency control, fraud prevention and measurement. Adult ads are switched off in the publisher panel.Provider cookies and localStorage set by Adsterra; names and lifetimes are controlled by Adsterra
YouTube / Google: www.youtube-nocookie.com and player media hostsOnly after you press Play on a videoShow the video you asked for and measure playbackCookies such as YSC, VISITOR_INFO1_LIVE and PREF, depending on browser and account state
Cloudflare Email Routing and the operator inboxOnly when you send emailForward and answer your messageSender address, message, attachments and mail metadata

Cookies, localStorage and retention

The site itself writes two localStorage keys. ras-consent holds JSON with choice (granted or denied), ts (a millisecond timestamp) and prompted (true or false); it expires after 180 days and an expired record is treated as missing. ras_adbar_closed holds JSON with closed (true) and t (a timestamp) so a Social Bar you closed does not return for 180 days. Delete either key in your browser to reset it; Cookie settings in the footer reopens the banner.

  • Google Analytics 4 may set first-party _ga and _ga_<container> cookies to distinguish browsers and sessions. Event retention is a property setting in GA4; Google currently offers 2-month and 14-month event-data retention, and this page does not claim a longer period or an independently audited setting.
  • Microsoft Clarity may set _clck and _clsk cookies and identifiers such as CLID and MUID. Microsoft documents 30-day recording retention, with favorite recordings and a randomly selected sample retained for up to 9 months. Masking depends on the project settings; do not type sensitive information into a recorded page.
  • Adsterra sets advertising cookies and storage from its own units. The names, purposes and lifetimes are chosen by Adsterra and can vary by creative and region; this site does not control them. The publisher panel records adult ads as off (adult=false), but that setting is not a guarantee about every creative that a network may serve.
  • YouTube may set YSC, VISITOR_INFO1_LIVE, PREF or other provider-controlled keys once its player loads. These names are examples, not a claim that every key was observed in every browser. Google policy governs their lifetimes.
  • Cloudflare and the mail provider keep request logs and email while needed to deliver the site, prevent abuse and answer you. Provider-side retention is governed by their policies.

Legal basis, advertising choices and opt-outs

Publishing the pages and securing them is our legitimate interest. For analytics, session replay and advertising, we rely on the choice recorded in the banner where consent is the applicable basis. This default-on implementation is not a prior-consent gate: in a jurisdiction that requires consent before those requests, the operator must add a prior gate or stop using these integrations there. Continuing to browse is not presented as affirmative consent.

You can withdraw at any time with Cookie settings and Reject. Reject stops future starts for 180 days in this browser but does not erase cookies or storage that a provider already set; clear those for this site and the provider domains in your browser if you want them gone. Reject does not stop page delivery, an email you choose to send, or a YouTube video you choose to play.

For personalized advertising, use Google Ads Settings at https://adssettings.google.com/ and the Digital Advertising Alliance opt-out at https://optout.aboutads.info/. European visitors can also use https://www.youronlinechoices.com/. Microsoft privacy choices are at https://privacy.microsoft.com/, and Adsterra describes its processing at https://adsterra.com/privacy-policy/. We do not sell personal information and we do not build a first-party profile.

Your rights and contact

Depending on where you live, you may ask for access, correction, deletion, restriction or portability, object to processing, or complain to a data-protection authority. Email [email protected] with the page, the approximate date and your request. Do not send passwords, payment details or other sensitive documents. Provider-held data may also require a request to that provider.

Policy changes appear on this URL with a new Last checked date. Questions about this policy go to [email protected].

Questions

Do GA4, Clarity and Adsterra wait for Accept?

No. They start by default on the first view unless a valid saved Reject, GPC or DNT applies. The banner records Accept or Reject and lets you change the choice later.

How do I stop them?

Press Cookie settings in the footer, then Reject. The site saves the refusal for 180 days, denies storage, asks Clarity to stop and reloads without GA4, Clarity or Adsterra. Existing provider cookies still need to be cleared in your browser.

Does Reject block YouTube?

YouTube is separate and its iframe exists only after you press Play. Reject does not remove a player you deliberately started, and not pressing Play means no YouTube request.

Related

Sources

Editorial contact: [email protected].