Privacy policy

What we store on your device

Without your Allow extras choice we set no tracking cookie at all: the analytics tag runs in Consent Mode v2 with analytics_storage denied, so gtag.js sends only a cookieless ping that carries no identifier and no cookie is stored. After an Allow extras choice, Google Analytics sets the _ga and _ga_STB18GGY0M first-party cookies on rngdle.top. The consent record itself is localStorage, never a cookie. Global Privacy Control and Do Not Track override Allow extras and force analytics_storage to stay denied. The same choice gates Microsoft Clarity: its loader runs only after Allow extras, so a visitor who never allows extras, or who sends Global Privacy Control or Do Not Track, makes no clarity.ms request at all, and choosing Reject later keeps it out of the next page you load. Cookie settings in the footer reopens the choice. Rejection removes the sandbox history, any active optional iframe, and returns analytics_storage to denied. Tools still work without saving a history. No embed loads automatically after consent: click its poster or Load official game as well.

Ads follow the same gate. Before an Allow extras choice the page holds an empty Adsterra container and the ad tags are never appended, so no request reaches Adsterra at all. After Allow extras, Adsterra writes the first-party cookies <code>sb_main_2685c4e8d1654d06d4ae80552a62c811</code> and <code>sb_count_2685c4e8d1654d06d4ae80552a62c811</code> on rngdle.top, which remember the floating bar state and how often it appeared, plus two short randomly named cookies that its Native Banner uses for the same purpose, and the localStorage key <code>extendedvaluekey</code>. The random names change between visits and Adsterra, not this site, sets their lifetime. Consent Mode v2 leaves ad_storage, ad_user_data and ad_personalization denied even after Allow extras, because this site runs no Google advertising tag: the only ad network here is Adsterra, and it is gated by the choice itself, not by Google's signals. Pressing Reject, or sending Global Privacy Control or Do Not Track, removes both ad tags, empties the container and stops the requests. It cannot undo a request that already went out.

Scripts and embeds

• Google Analytics 4 is the only third-party script in the page head: gtag.js from www.googletagmanager.com, measurement ID G-STB18GGY0M (property 557102981, web stream 15940606992, account game_websites). A local Consent Mode v2 queue sets ad_storage, ad_user_data, ad_personalization, and analytics_storage to denied before the config call and enables ads_data_redaction, so nothing identifiable is measured until you allow extras. If you allow, reports are sent to www.google-analytics.com (or a regional host such as region1.google-analytics.com); the ad categories stay denied and we request no advertising script.
• Microsoft Clarity (Microsoft): only after Allow extras, a short loader pulls the Clarity SDK from scripts.clarity.ms and reports to a *.clarity.ms/collect endpoint (the ingest subdomain varies, for example e.clarity.ms). Project yr8jj6zjwi, created for this domain only. Clarity builds heatmaps and session recordings, masks form input and other sensitive content by default, and writes the first-party cookies _clck (about a year) and _clsk (about a day). Rejecting, a Global Privacy Control or a Do Not Track signal keeps the loader from running, so rngdle.top makes no clarity.ms request unless you allow extras.
• YouTube (Google): only after Allow extras and a video-poster click, an iframe loads from www.youtube-nocookie.com. Measured player requests also use www.google.com, fonts.gstatic.com, www.gstatic.com, jnn-pa.googleapis.com, i.ytimg.com, yt3.ggpht.com, and a googlevideo.com video-delivery host. Google receives the player request, including IP and browser information; privacy-enhanced mode does not mean zero data collection. We do not control the player’s own consent UI.
• RNGdle: only after Allow extras and Load official game, an iframe loads https://www.rngdle.com/. Its own privacy policy governs game sessions, hashed email magic links, roll history, and hashed IP/user-agent records. Cloudflare provides its network service. We do not receive your roll or game login details. An ordinary link does not embed the destination.
• Adsterra (the only ad network on this site): only after Allow extras, two tags are built by the page and appended, one per placement. The Native Banner tag (ad unit 31516245) is inserted into the static container on this page and the Social Bar tag (ad unit 31516246) is appended just before the end of the document, which is where Adsterra asks for it. Both are requested from bicea.org, and the creatives and auction calls that follow come from Adsterra delivery hosts such as cdn.storageimagedisplay.com and cdn.show-creative1.com. Adsterra runs the auction and is the controller of the ad data it collects; adult ads are switched off for this website in the Adsterra backend. Before Allow extras neither tag exists in the page and no request reaches Adsterra.
• Fonts are files shipped with this site (Space Grotesk and Space Mono). They are not requested from a font CDN at view time.

Ads, Do Not Track, and your rights

One advertising system runs on this site: Adsterra (website id 6091919, ad units 31516245 and 31516246), and it only runs after you press Allow extras. This site sells nothing itself: there is no mailing list, no account and no data sale. Adsterra runs the ad auction, picks the advertiser, and is the controller of the data its tags collect under its own privacy policy at adsterra.com/privacy. Its floating Social Bar can be dismissed with the Hide ad bar control in the footer, and that choice is remembered. To review or limit personalized advertising industry-wide, use the Digital Advertising Alliance opt-out page at optout.aboutads.info or Your Online Choices at www.youronlinechoices.com. ads.txt on this domain declares no seller, because Adsterra publishes no seller line and no publisher id for it: inventing one would authorize the wrong party to sell this inventory. A Do Not Track signal and a Global Privacy Control signal are treated as reject. Email contact@rngdle.top for privacy requests. Cloudflare Email Routing forwards correspondence to our configured mailbox; the receiving mail provider is Google Gmail. They process the message, sender address, and mail headers to deliver it. We keep correspondence only as long as needed to handle the request, then delete it. Legal bases: necessary storage for your privacy choice, consent for optional history, embeds and ads, and legitimate interest in answering email.

Controller: rngdle.top, https://rngdle.top. Contact: contact@rngdle.top. Changes to this policy show up as a new updated date on this page. Aliases /privacy-policy/, /cookie-policy/, and /cookies/ redirect here.

What I checked myself

I checked the built pages for third-party script tags before publishing this text. The HTML loads exactly one third-party script, the Google Analytics 4 tag (gtag.js, measurement ID G-STB18GGY0M) on www.googletagmanager.com, and it is denied all storage by default. Microsoft Clarity (project yr8jj6zjwi) and the Adsterra ad tags are held back the same way: their loaders run only after Allow extras, so the initial HTML contains no clarity.ms script request and no Adsterra script request, only an empty ad container. The ad network is Adsterra, one network only, with two placements: a Native Banner above the footer (ad unit 31516245) and the floating Social Bar you can hide from the footer (ad unit 31516246). Adult ads are switched off for this website in the Adsterra backend. YouTube and the rngdle.com game are iframes created only after a click. The two localStorage keys below are the only ones this site writes before you allow extras.