EvoWorld.io

Privacy policy

Reviewed 13 October 2026. This guide loads no third-party script, ad, analytics tag or recorder until you press Accept in the cookie bar. If you accept, this site runs Adsterra ad units, Google Analytics 4 and Microsoft Clarity; if you then click Play or a video, the official game or YouTube can load their own cookies, analytics and advertising partners.

Reviewed 2026-10-13 · EvoWorld.xyz

The game frame that loads only after Play is clicked

Research notes

Browser tests recorded zero third-party requests on initial page load and after Reject, and Accept alone loaded only the services named below. Accepting and then clicking Play loaded the selected external game, whose advertising and analytics partners are listed separately in the inventory below. Those services do not become this guide’s ad sellers.

Who we are

The operator of evoworld.xyz publishes this guide. Contact [email protected]. Pixel Voices operates the game at evoworld.io and is a separate controller for anything that happens inside that game.

Scripts that load, and when

Before a choice, initial HTML loads no third-party script src. The page defines two inline helpers only: gtag, which records a Consent Mode v2 default of denied for ad_storage, ad_user_data, ad_personalization and analytics_storage and switches on ads_data_redaction and url_passthrough, and a Microsoft Clarity loader that is defined but not invoked. Neither sends a hit and no advertising or recording script is requested.

Accept flips all four Consent Mode signals to granted and injects the three services this guide controls, each of which then makes its own requests:

  • Adsterra — Native Banner ad unit NativeBanner_1 (unit ID 31708239), rendered in a labelled slot between the article and the footer, and Social Bar ad unit SocialBar_1 (unit ID 31708240), a fixed bar the network positions itself. Both snippets are served from bicea.org; adult ads are switched off for this website in the Adsterra dashboard (website ID 6119729). The footer button “Hide ad bar” removes the Social Bar and remembers that choice in localStorage.
  • Google Analytics 4 — measurement ID G-PL6FSD4RZY, loaded from googletagmanager.com with the consent signals above. Only after acceptance does it store its _ga / _ga_* cookies (up to 2 years) and report page views.
  • Microsoft Clarity — project yx2i1hw9pd, loaded from clarity.ms. It records session replays and heatmaps, including clicks, scrolls and masked page content; Clarity stores its own identifiers (_clck, _clsk, CLID) for up to 1 year. Recording starts only after acceptance.
  • Reject (or Global Privacy Control, which overrides a click on Accept) makes no third-party request at all: no ad unit is created, Clarity is never invoked, and the ad bar is torn down if it had loaded.
  • On desktop, Accept followed by Play loads a sandboxed iframe from https://evoworld.io/. Pixel Voices controls that game and its partners: Poki (SDK, content, ads and telemetry), InMobi (consent platform), and Google (AdSense/DoubleClick ads and Google Analytics/Tag Manager). Their requests may share your IP address, browser details, referrer and device or advertising identifiers. We cannot read or clear cookies belonging to those origins. The game policy is at https://evoworld.io/privacy.
  • Accept followed by a video click loads YouTube’s privacy-enhanced player from youtube-nocookie.com. Observed Google/YouTube resources include ytimg.com, googlevideo.com, gstatic.com, ggpht.com and googleapis.com. Playback may involve telemetry and cookies or similar identifiers; “nocookie” is not a promise of no tracking. The cover image is hosted locally.
  • Before a choice, after Reject, or when Global Privacy Control is enabled, player clicks open the external site in a new tab instead of injecting an iframe here. Mobile Play always opens the official game separately. The separate website then has its own privacy choices.

Advertising sellers on this site

Adsterra is the only advertising network this guide uses directly, through its two units above. There is no AdSense tag, no other exchange and no reseller. Because Adsterra states that it does not provide ads.txt records for publishers (“we do not provide ads.txt files, as our advertisers do not require them”, help-publishers.adsterra.com), /ads.txt declares no seller line: writing a guessed publisher ID would be worse than declaring nothing, and no authorised seller ID has been supplied for this domain.

This guide receives no ad revenue share from the embedded official game or videos and does not declare their seller IDs in its own ads.txt.

External network hosts observed after consent

This dated inventory includes the ad units and measurement tags this guide injects after consent, plus the official game’s server/CDN subdomains and nested advertising supply chain, plus YouTube video delivery. Domain entries include their subdomains. Not every host loads on every visit: location, auctions and player choices can change the requests. These are external-service hosts, not a claim that this guide contracts with each company. No tracker from this list loads in this guide’s initial HTML.

Third-party requests can include ad matching, delivery, anti-fraud checks, content hosting and game-server status. For the game, consult Pixel Voices’ policy and its consent controls for current vendors. For videos, consult Google’s privacy policy.

Observed domain (including subdomains)
bicea.org
clarity.ms
googletagmanager.com
google-analytics.com
evoworld.io
poki.com
poki-cdn.com
poki.io
inmobi.com
googlesyndication.com
doubleclick.net
google.com
adtrafficquality.google
2mdn.net
youtube-nocookie.com
ytimg.com
googlevideo.com
gstatic.com
ggpht.com
googleapis.com
jsdelivr.net
appier.net
sportradarserving.com
travelaudience.com
pangle-ads.com
crwdcntrl.net
amazon-adsystem.com
advolve.io
bluevoox.com
ladsp.com
creativecdn.com
loopme.me
dotomi.com
adkernel.com
adtdp.com
openx.net
mediago.io
admaster.cc
criteo.com
ymmobi.com
adsrvr.org
bidr.io
openxcdn.net
linkedin.com
gsspat.jp
smaato.net
seedtag.com
criteo.net
everesttech.net
stackadapt.com
teads.tv
opera.com
4dex.io
simpli.fi
temu.com
bidswitch.net
moloco.com
fout.jp
ipredictive.com
outbrain.com
uncn.jp
ctnsnet.com
onetag-sys.com
docomo.ne.jp
tribalfusion.com
yahoo.com

Cookies and localStorage

This origin does not set a cookie for consent. The choice is stored in localStorage under the key ew_consent_v1 as JSON with choice (granted or denied) and ts (a millisecond timestamp). We keep that record for 180 days, then the banner script deletes it. Clearing site data for evoworld.xyz removes it immediately. A second key, ew_adbar_hidden, remembers whether you closed the Adsterra Social Bar so it stays closed; it holds “true” or “false” and is removed the same way.

The cookies and identifiers listed above belong to Adsterra, Google Analytics 4 and Microsoft Clarity, are set only after you accept, and can be refused by never accepting or removed by clearing site data or withdrawing consent. The legal basis for all of it is your consent (GDPR Art. 6(1)(a) and, for the ePrivacy cookie rules, your prior consent), which you can withdraw at any time through Cookie settings. Reject removes loaded ad units and iframes and changes the stored choice; it cannot undo data already sent to a third party.

Legal basis, rights, and signals

The local consent record remembers your explicit choice. Global Privacy Control prevents ad units, recording and embedded players even if you click Accept; an explicit button choice then stores denied. GPC alone need not create a storage record. This guide installs no ad or recording tracker regardless of Do Not Track. These controls do not apply to a separate external tab.

You can ask for access, correction, deletion, or to object by emailing [email protected]. Because we do not run a user account database, deletion of the consent choice is done in your browser. You may lodge a complaint with your local data protection authority.

To opt out of personalised advertising overall, use Google’s Ad Settings at https://adssettings.google.com/ and the industry pages at https://www.youronlinechoices.com/ or https://optout.aboutads.info/. To stop Microsoft Clarity recordings, withdraw consent here or use Microsoft’s controls at https://privacy.microsoft.com/.

We change this policy by editing the page and updating the checked date. The date on this page is the date of the last review.

In-game view from the official client, a separate site from this guide
In-game view from the official client, a separate site from this guide

Questions

Do you use Google Analytics?

Yes, Google Analytics 4 (G-PL6FSD4RZY), loaded from googletagmanager.com. It runs in Consent Mode v2 with every storage signal defaulting to denied, and it stores its cookies only after you press Accept.

Do you record my session?

Only if you accept. Microsoft Clarity (project yx2i1hw9pd) records heatmaps and replays after acceptance and is never loaded after Reject or with Global Privacy Control on.

Which ad network do you use?

Adsterra only — Native Banner (unit 31708239) and Social Bar (unit 31708240), both injected after consent, with adult ads off. There is no AdSense on this site and no ads.txt seller line, because Adsterra does not issue one.

How long is the consent choice kept?

180 days in localStorage key ew_consent_v1, or until you clear site data.

How do I withdraw consent?

Use Cookie settings in the footer and choose Reject. Loaded ad units are removed and the stored choice changes; data already sent to a third party cannot be recalled.

Keep reading

Sources