Privacy policy

What loads on your first visit

Google Analytics 4 (Measurement ID G-X5WXRFVSPQ) counts page views and records the page, referrer, approximate location, device, and browser. It is loaded from googletagmanager.com before you touch the banner.

Microsoft Clarity (project z4lxkmumbp) records heatmaps and session replays: clicks, scrolling, mouse movement, and the pages you visit. Microsoft’s linked Clarity documentation says input fields are masked and balanced masking is the default, covering numbers and email addresses rather than all page text (single provider source). We do not ask visitors to submit personal information through an on-page form.

Adsterra (publisher 3403020, website 6156409) serves two placements: a Native Banner (unit 31961397) below the footer content and a Social Bar (unit 31961398) fixed at the bottom of the viewport. Adsterra and its demand partners may set cookies and receive your IP address, user agent, and the page URL to choose and measure an ad. Adult ads are switched off for this site.

YouTube (youtube-nocookie.com) is different: the player is not requested until you press a video button. That click creates an iframe that can set YouTube cookies and receive your IP address. Before the click the poster is a local image.

Observed on local built pages on 2026-10-28: www.googletagmanager.com and www.google-analytics.com (Google); www.clarity.ms, scripts.clarity.ms, letter-prefixed collection hosts under clarity.ms, and the c.bing.com cookie-sync endpoint reached from c.clarity.ms (Microsoft); bicea.org, static.nresystems.com, cdn.storageimagedisplay.com, cdn.show-sb.com, cdn.show-creative1.com and cdn.cloudpiko.com (the two Adsterra placements and their delivery chain). These default requests stop on the reloaded document after Reject. Delivery hosts may change with the creative; this is the observed list, not a permanent provider allowlist.

The site itself does not run any other advertising, session-replay, or analytics SDK. The traffic-mesh banner SDK is not installed here.

Cookies and localStorage keys

mw_consent_v1 — localStorage on mouthwashing.xyz. Stores granted or denied plus a timestamp. Lifetime 180 days; after that the choice is treated as unset and the default applies again. The site sets no first-party cookie for this record.

mw_social_closed — localStorage on mouthwashing.xyz. Stores 1 when you close the Adsterra Social Bar. It has no expiry and stays until you clear site data, so the bar does not return on the next page load.

_ga and _ga_X5WXRFVSPQ — Google Analytics cookies on mouthwashing.xyz, used to distinguish users and sessions. Their expiry depends on provider defaults and property settings and was not independently measured in this review. Google controls any additional storage on its own domains.

_clck, _clsk, and MUID (Microsoft) — Microsoft Clarity cookies used to join a session and keep the replay consistent. Clarity may also use browser storage under clarity.ms. Cookie lifetimes were not independently measured, so no fixed expiry is claimed here.

Adsterra cookies — set by bicea.org and Adsterra’s creative domains, not by mouthwashing.xyz. Their names and lifetimes are controlled by Adsterra and its partners; this site cannot read or list them from the first-party domain.

YouTube cookies — set only after you start a video, on youtube-nocookie.com and youtube.com. Google controls their names and lifetimes.

Why we process this information

Analytics and session replay: we use them to see which guides are read and where the layout fails. Analytics storage is granted by default. The banner records a preference rather than proving prior opt-in consent. Reject disables further analytics loading; data already sent cannot be recalled by this control.

Advertising funds the site. Google Consent Mode starts with ad_storage, ad_user_data, and ad_personalization denied, while analytics_storage is granted; the first-visit preference then updates the three ad signals to granted. Reject changes the ad signals to denied. Reject also stops the Adsterra scripts from being created on later pages.

We do not sell personal information, and we do not use your email address for advertising. Mail you send to [email protected] is used only to answer you.

Default load, Reject, and Global Privacy Control

This site loads the scripts by default for visitors with no stored choice. The banner is a notice and a withdrawal tool, not a gate: pressing Reject writes denied to mw_consent_v1, disables GA4, removes the integration tags, and reloads the document with the refusal stored. The new document creates no GA4, Clarity, or Adsterra scripts, and the refusal lasts 180 days. Cookie settings in the footer reopens the banner so you can change your mind.

If your browser sends Global Privacy Control, or Do Not Track is 1, the site treats you as having rejected: it writes denied and does not load the scripts even on a first visit.

Rejecting analytics does not delete data already sent. To remove it, use the Google and Microsoft controls below or email us.

Personalized advertising: how to opt out

Google Ad Settings (https://adssettings.google.com/) turns off personalized ads from Google. The Digital Advertising Alliance opt-out (https://optout.aboutads.info/) and the Network Advertising Initiative (https://optout.networkadvertising.org/) cover many Adsterra demand partners. Your Online Choices (https://www.youronlinechoices.com/) is the EU version.

Adsterra’s own privacy policy and opt-out links are at https://adsterra.com/privacy-policy/. Microsoft’s privacy dashboard is at https://account.microsoft.com/privacy. Google’s is at https://myaccount.google.com/privacy.

Opting out of personalization does not stop ads; it makes them less relevant. Blocking the scripts with a browser extension also works, and the site continues to function.

Retention and transfers

mw_consent_v1: 180 days. mw_social_closed: until you clear site data. The GA4 property event-retention setting was not verified in this review, so no property-specific period is claimed here. Clarity, Adsterra, and YouTube retain data under their linked policies; the local preference does not delete provider-held data.

These services may process data outside your country. The providers describe processing locations and transfer safeguards in their linked privacy policies; this site does not independently certify those safeguards.

Cloudflare hosts the site and provides DNS and contact-email routing. It receives request and connection information to deliver pages and handle abuse. Its exact log retention is not independently verified here; see the Cloudflare privacy policy.

Your rights and contact

You can ask for a copy of the data we hold about you, ask us to correct or delete it, or object to processing. Email [email protected] with the subject “privacy”. We answer from the same address. You can also complain to your local data protection authority.

Clearing site data in your browser removes mw_consent_v1 and mw_social_closed. It does not reach cookies set by Google, Microsoft, Adsterra, or YouTube on their own domains; use the opt-out links above for those.

This policy is updated by editing this page. The checked date at the bottom is the version; material changes are published before the new script ships.