Anime Ball Duels fan-site lightning emblemANIME
BALL DUELSPLAY

Build reviewed 17 October 2026 · optional storage stays off until Allow

Privacy policy

This policy describes the website build edited on 2026-10-17 and serving live at https://animeballduels.net. Contact: [email protected]. This build has no user account system. Game-source snapshot dates are separate from this policy’s edit date.

Fan-made illustration of blue lightning and red flame ball fighters facing off; not a gameplay screenshot.
Fan-made illustration of a blue lightning ball fighter above an arena; not a gameplay screenshot.

What loads, and why

Every row above the YouTube playback rows describes what this build sends on every page before you choose, and what changes if you press Allow. The playback rows were observed in the 17 October 2026 browser review, after permission and a play click. Playback requests can vary by device, region, and video.
NameWhenPurposeKeys
This site / serving originEvery pageServe HTML, fonts, images, and scriptsNo account cookie is set by the reviewed application code.
localStorage abd_consent_v2After you choose, if storage is availableRemember the one optional-storage choice, which covers the ad units, the session recording, analytics storage, and the video permissionJSON {choice, ts}, where choice is "granted" or "denied". Reused for up to 180 days. Read in your browser and never transmitted. The earlier abd_consent_v1 key only asked about video, so this build deletes it instead of reusing it as ad consent.
localStorage abd_ads_closedOnly if you close the floating ad stripKeep that strip closed on later page views, not just until the next refreshThe string "1". Removed when you press Allow again. No other key is written by the ad loader.
www.googletagmanager.comEvery page, as the page loadsDeliver the Google Analytics 4 tag (measurement ID G-XJD4J2GBB7)Request sent before you make any choice. No identifier is sent with the request itself.
static.cloudflareinsights.comEvery page, as the page loadsCloudflare Web Analytics beacon for this zone. It is injected by Cloudflare’s own edge, not by this site’s build: neither the repository nor the built files reference it.No cookie belonging to it appeared in the tested browser. Cloudflare presents this product as cookieless and says it does not fingerprint visitors; that is the provider’s description, and the review could only confirm that no cookie from it was observed.
www.google-analytics.comEvery page; measurement follows your choiceGoogle Analytics 4 measurement pingsBefore Allow the tag runs cookieless: requests carry the denied consent state with advertising data redaction, so no stable identifier is sent and no new analytics cookie is set. After Allow Google Analytics 4 may set its own first-party _ga and _ga_XJD4J2GBB7 cookies, whose lifetime follows that tag’s configured retention, and pings carry a client id.
bicea.org (Adsterra ad script host)Only after Allow. Never for a visitor who refuses, and never for one who does not answer.Deliver the Adsterra Native Banner (ad unit 31768783) and Social Bar (ad unit 31768784) for the Adsterra website record animeballduels.net (website id 6128090). The Native Banner renders below the article content; the Social Bar is a strip fixed to the bottom of the viewport.Adsterra receives the page address, your IP address, device and browser details, and your interaction with the units. In the tested browser each unit set a cookie on bicea.org whose name is pip_ followed by a 32-character unit hash — two of them, one per unit, not HttpOnly, and both expiring inside a day, which is the cap Chrome applies to third-party cookies — alongside Cloudflare’s own __cf_bm challenge cookie on the same host. "Show adult ads" is off for this website in the publisher dashboard, so no adult-creative feed is requested. Both invoker scripts are absent from the served HTML: their bicea.org addresses appear there as strings only, and no request to that host is made before Allow.
www.clarity.ms, scripts.clarity.ms, and the upload host (f.clarity.ms, e.clarity.ms live)Only after Allow, and not at all for a visitor who refuses or never answersDeliver the Microsoft Clarity tag (project id yyql8jzr1o), the session-replay SDK (scripts.clarity.ms/0.8.72/clarity.js in both tests; the version changes), and the recording uploadsFirst-party cookies _clck and _clsk are set on this site’s own origin while the recording runs. Refusal, and withdrawal of an earlier Allow, removes the script tags and requests deletion of both cookies; uploads already sent cannot be recalled. A third-party CLID cookie on www.clarity.ms was also present in the browser used for this review — this build neither reads nor sets it, and this policy does not claim that visiting this site is what created it.
www.youtube-nocookie.comAfter Allow and a play click, unless GPC or DNT denies itYouTube player, subtitles, playback events and logsNetwork requests observed; privacy-enhanced mode is not a promise of no data collection.
googlevideo.com subdomainsDuring permitted YouTube playbackVideo and audio deliveryObserved host: rr2---sn-u2buxaxjvh-npol.googlevideo.com. The media host may change.
i.ytimg.com and yt3.ggpht.comWhen the permitted player loadsVideo thumbnails and channel imagesRequests observed inside the player; the website’s own poster images are local.
fonts.gstatic.comWhen the permitted player loadsFonts inside the YouTube playerThe website’s own fonts are local, not Google Fonts requests.
www.google.com and jnn-pa.googleapis.comWhen the permitted player loadsSupporting script and interface requests made by YouTubeObserved inside the embedded player, not a separate site analytics integration.

Consent, GPC, and Do Not Track

Four storage types start denied on every page load: ad_storage, ad_user_data, ad_personalization, and analytics_storage, with ads_data_redaction on. Allow is the only thing that flips them to granted, and it is also what creates the Adsterra invoker scripts and the Microsoft Clarity tag, so a visitor who refuses — or who never answers, which is the default — leaves bicea.org and clarity.ms unrequested. Google Analytics 4 and the hosting provider’s own Web Analytics beacon are the two third-party scripts that arrive with the page before any choice; the Google tag stays cookieless while analytics_storage is denied, and the host’s beacon is outside this consent queue.

Allow also permits the optional YouTube player, which still needs a play click before it loads. Refuse removes already loaded ad scripts, the Clarity tag, and video iframes from the page you are on. Removal stops those scripts locally but cannot undo requests already sent.

Global Privacy Control or Do Not Track set to 1 keeps every optional storage type denied and the player closed, even where an earlier Allow is stored in the browser. Cookie settings in the footer reopens the choice, and your browser’s site-specific data controls can remove the stored record.

Adsterra is the only advertising network on this site: no AdSense tag and no second banner network ships on these pages. The one seller authorised to sell this domain’s inventory is declared in /ads.txt as adsterra.com, 3403020, DIRECT — that is the publisher id the Adsterra dashboard reports for this account, read from the dashboard rather than guessed, and no other seller line is published. Personalised-advertising controls for the accounts involved: https://adssettings.google.com/, https://www.youronlinechoices.com/, and https://optout.networkadvertising.org/. Those are links, not scripts; following them loads nothing from this site.

YouTube/Google can receive request metadata and playback information after permission. Observed requests included playback statistics and log endpoints. The site’s denied Google consent queue does not prevent processing inside a separately permitted third-party player.

The tested YouTube origin exposed storage keys yt-player-bandwidth, yt-player-caption-persistence, ytidb::LAST_RESULT_ENTRY_KEY, and yt-icons-last-purged. These are observations of an existing browser origin, not proof they were all created on this visit. No document.cookie names were visible in this playback test; that is not a guarantee about other sessions. Refusal does not erase third-party storage or data already sent.

Hosting, retention, and questions

Cloudflare Pages serves this build, and the published HTML and ad configuration described above were checked live on 17 October 2026. Cloudflare also injects its own Web Analytics beacon into pages served from this zone (static.cloudflareinsights.com); that script belongs to the host, not to this build, it is not gated by the choice above, and it is the only third-party script here besides Google Analytics 4 that runs before you choose. Cloudflare’s own request logging for those files, and its retention settings, have not been audited in this review, so this page does not claim what the platform keeps or for how long.

The choice is accepted for up to 180 days from its timestamp. Expiry makes the application ignore it; it does not necessarily delete the stored key. The key may remain until replaced or removed through site-data controls.

Email [email protected] for privacy questions or correction requests. Cloudflare Email Routing forwards this address to a Gmail mailbox, so Cloudflare and Google process messages you choose to send. The routing configuration was checked on 17 October; mailbox retention has not been audited. Email does not load these services in your browser on this site. Do not send passwords, session cookies, payment details, or unredacted account screenshots.

Questions

Does Allow turn on advertising?

Yes. Allow creates the two Adsterra invoker scripts, which is what requests the Native Banner and the fixed Social Bar from bicea.org, and it releases the four analytics and advertising storage types. Refuse, the default for a visitor who never answers, leaves those scripts uncreated, so no request reaches the ad host.

How do I change my mind?

Use Cookie settings in the footer and choose Refuse, or delete the localStorage keys abd_consent_v2 and abd_ads_closed. Refusing removes the Adsterra scripts, the Clarity tag and the recording cookies from the page you are on; data already sent cannot be recalled.

Is a session recording made without my consent?

No. Microsoft Clarity, project id yyql8jzr1o, is injected only after Allow, so the served HTML contains no clarity.ms script tag. Once allowed, it sets the first-party cookies _clck and _clsk and records the session until you leave the page or withdraw the choice.

Sources and snapshot dates

Advertisement