UNDERGROUND 2 REVIVED

Privacy

Privacy policy

Google Analytics 4 (G-15VG4MSN15), Microsoft Clarity (project z4iem9u5rq) and Adsterra (publisher 3403020, units NativeBanner_1 and SocialBar_1) load by default on the first visit, before you touch the banner. The banner is a notice with Accept and Reject: Reject turns analytics, recordings and ads off and stores that choice for 180 days. We also keep a local record of whether you hid the Social Bar. No account is created, and those two localStorage keys are the only records this site writes itself. YouTube plays only after you press Play.

Play on nfsu2.xyz

Analytics

Google Analytics 4, measurement ID G-15VG4MSN15. Loads by default; Reject stops the tag and sets analytics_storage to denied.

Source: This build · checked 2026-10-28

Recordings

Microsoft Clarity, project z4iem9u5rq. Loads by default; Reject removes the tag.

Source: This build · checked 2026-10-28

Ads

Adsterra publisher 3403020. Native Banner unit 31959214 and Social Bar unit 31959215. Adult ads are off.

Source: ref/adsterra.json · checked 2026-10-28

localStorage

u2r-consent and u2r-adbar-closed. Both expire after 180 days.

Source: Site script · checked 2026-10-28

Evidence note: figures attributed only to one publication or to the project's own documentation are single-source reports. The project site, README and playing notes count as one source group. Sources and checked dates are shown with each fact.

What I checked

I read this page against the built HTML: the page script creates the GA4 tag, the Clarity tag and the two Adsterra units, and no advertising or recording host appears as a <script src> in the initial HTML. The site does not run AdSense, a popunder, a smartlink, or a banner network other than the two Adsterra formats named here. If a later build adds a vendor, this page has to name it in the same change.

Start page of the nfsu2.xyz browser project, with Play, Saves and Online
Start page on the project repository (th0mk/nfsu2-web, docs/web/start-page.png). Checked 2026-10-28.
Frame from VRacer’s October 2026 setup video of the browser game
YouTube frame, VRacer, 22 Oct 2026. Linked, not re-hosted as video.

What loads, and when

These requests start with the first paint. None of them waits for an Accept click. The banner explains what is running and lets you withdraw. Withdrawal stops Clarity and Adsterra on the next page view, sets GA4 Consent Mode signals to denied, and removes the vendor nodes already created on this one.

The table lists the third parties this build actually requests. A link you choose to follow is ordinary navigation, not a request this site makes. On the 28 October 2026 mobile build check, the browser also contacted the delivery hosts www.googletagmanager.com, www.google-analytics.com, www.clarity.ms, scripts.clarity.ms, a Clarity shard under *.clarity.ms, bicea.org, static.nresystems.com, cdn.storageimagedisplay.com, cdn.show-sb.com, cdn.show-creative1.com, cdn.cloudpiko.com, fonts.googleapis.com and fonts.gstatic.com (a typeface the Social Bar creative asks for). The bicea.org host and the last five are Adsterra or its creative and delivery partners; their host set can change with an ad response. Reject prevents GA4, Clarity and Adsterra from starting on a new page, sets GA4 Consent Mode signals to denied, and removes the vendor nodes already added on the current page. The GA4 tag is created by the same page script as the other two, while the head still queues the Consent Mode default and the config command before it.

PartyWhen it loadsPurposeData it can receive
Google Tag Manager delivery (www.googletagmanager.com)First paint, unless a stored RejectDelivers the GA4 tag named belowPage URL, referrer, browser and network metadata needed to fetch the tag
Google Analytics 4 (G-15VG4MSN15)First paint, unless a stored RejectAggregate page views and traffic sourcesPage URL, referrer, coarse device and browser data, a random client ID
Microsoft Clarity (www.clarity.ms, scripts.clarity.ms, and a Clarity shard)First paint, every page that uses the site layoutHeatmaps and session recordingsPage URL, clicks, scrolling, layout and device data; form fields are masked by default
Adsterra Native Banner (bicea.org, 31959214, plus delivery partners)First paint, in the content slot above the footerSponsored linksPage URL, IP address, user agent, ad request and impression data
Adsterra Social Bar (bicea.org, 31959215, plus delivery partners)First paint, as a fixed bar at the bottomSponsored barPage URL, IP address, user agent, ad request and impression data
YouTube (youtube-nocookie.com)Only after you press Play videoPlays the cited videoVideo ID, IP address, browser data; Google may set its own cookies once the player starts

Cookies and localStorage

The site writes two localStorage keys of its own. They contain no name, email or account ID, and they are not sent to a server by this site.

NameTypeSet byPurposeRetention
u2r-consentlocalStorageThis siteYour Accept / Reject choice, the matching ad and analytics signals, a reason code and an expiry timestamp180 days, then treated as a new visit
u2r-adbar-closedlocalStorageThis siteThat you hid the Adsterra Social Bar180 days
_gaCookieGoogle Analytics 4Distinguishes browsers for aggregate measurementUp to 2 years
_ga_15VG4MSN15CookieGoogle Analytics 4Keeps the GA4 session state for this measurement IDUp to 2 years
_clckCookieMicrosoft ClarityPersists the Clarity user ID across visitsUp to 1 year
_clskCookieMicrosoft ClarityGroups page views into one recording session1 day
MUID, CLIDCookieMicrosoftMicrosoft identity and Clarity consent signalsUp to 1 year
Adsterra cookiesCookieAdsterra and its creative partnersFrequency capping, fraud checks, impression and click attribution. Names are issued per campaign and are not stable site keys.Set by Adsterra; see its policy
VISITOR_INFO1_LIVE, YSC, PREF, CONSENTCookieYouTube / GoogleSet only when a video player starts, to keep playback and preferences workingSet by Google; see its policy

Advertising, personalisation and opt-outs

Adsterra fills the Native Banner slot and the Social Bar. Adult advertising is switched off on the Adsterra website record for this domain, and the site does not create popunder, banner or smartlink units. Adsterra and its demand partners may use cookies or device identifiers to cap frequency, detect invalid traffic, and measure clicks. Where a partner personalises ads, that choice is made by the partner under its own policy; this site does not pass it a profile.

You can withdraw at any time with Reject in the banner or Cookie settings in the footer. Reject sets the Google Consent Mode ad signals and analytics_storage to denied, removes the Clarity script and removes both Adsterra units from the page, and the choice lasts 180 days. Reject does not delete cookies that a vendor already set; clear those in your browser's site-data settings if you want them gone immediately.

For personalised advertising you can also use Google Ads Settings, the Network Advertising Initiative opt-out, or the European Your Online Choices page. Adsterra's own privacy policy explains its retention and partners. These links work independently of this site's banner.

Legal basis, choices and retention

The local record describes the site's technical loading choice. On a first visit, the site records granted with reason default and shows the notice; this is not a record that you clicked Accept. Clicking Accept records that action, and clicking Reject records withdrawal. Security logging by the host is separate from these marketing tags.

Global Privacy Control and Do Not Track are treated as Reject: the page writes denied before the loader runs, so Clarity and the Adsterra units are not created and GA4 receives denied signals. The banner stays down for GPC. If you delete the two localStorage keys, the next visit starts as a new visit and loads the default set again.

Retention: the two site keys last 180 days. We have not verified the current GA4 property's event-retention setting or the Clarity project's recording-retention setting, so no project-specific duration is stated here. Google, Microsoft, Adsterra and YouTube describe their retention in their own policies. Email you send to the contact address is kept only as long as needed to answer it and is not added to a marketing list.

Contact and changes

The contact for a privacy request, an access request or a complaint is [email protected]. You can also complain to your local data-protection authority. This guide is not directed at children, and we do not knowingly collect data from a child.

A change to this policy appears on this page with a new checked date. The current build was checked on 28 Oct 2026. The page names every third party the HTML actually requests, so a new tag and a new paragraph ship together.

Questions

Do these tags wait for me to click Accept?

No. GA4, Clarity and the two Adsterra units load on the first visit. The banner is a notice, and Reject is the switch that turns them off and remembers the choice for 180 days.

What is u2r-consent?

A localStorage record of your Accept or Reject choice, the matching signals, a reason code and an expiry. It stays on your device for 180 days and is not sent to this site's server.

What is u2r-adbar-closed?

A localStorage record that you hid the Adsterra Social Bar. It also expires after 180 days.

Do you run AdSense or popunders?

No. The only ad units are Adsterra Native Banner 31959214 and Social Bar 31959215. Adult ads are off and there is no popunder, banner or smartlink unit.

Does the video load YouTube immediately?

No. The page shows a poster; the youtube-nocookie.com player is created only after you press Play video.

How do I change my choice?

Use Cookie settings in the footer, then Accept or Reject. Reject takes effect on this page immediately and on later pages from the stored record.

Related pages

Sources

Last checked: 2026-10-28. Where only one source states a number, the sentence says so.