Privacy policy

Checked 2026-10-25. Sources are listed at the bottom of this page.

Flee the Facility official thumbnail: a facility corridor with a freeze pod and a beast
Flee the Facility official thumbnail: a facility corridor with a freeze pod and a beast
Flee the Facility game icon from Roblox
Flee the Facility game icon from Roblox

Who is responsible

The editors of fleethefacility.org publish this site. Email [email protected]. There is a public contact address on the Contact page. We do not ask Roblox for your account data and we do not run a login.

This policy covers the website at https://fleethefacility.org. It does not cover Roblox, YouTube, Adsterra or Microsoft services after you leave this site; their own policies apply there.

Default loading and how to withdraw

Google Analytics 4, Microsoft Clarity and Adsterra load by default on every page view. The banner is a notice and a withdrawal control, not a gate: it appears on a first visit and both Accept and Reject are always available. Press Reject and the three scripts stop, the advertising and analytics consent signals become denied and the document reloads without these tags, and the choice is stored for 180 days. Press Accept to restore them.

A first visit with no stored record starts the three loaders, but Google Consent Mode v2 defaults ad_storage, ad_user_data and ad_personalization to denied and analytics_storage to granted before GA4 config. Ads data redaction is enabled. Google advertising consent signals change to granted only after Accept. Clarity receives its own granted consentv2 signals when its default-on loader starts; Adsterra also starts independently of Google signals. Reject stops all three. If your browser sends Global Privacy Control (GPC), the site records denied instead and does not start the optional scripts. Do Not Track is not a separate signal here; GPC is the one we honor.

YouTube is different: the page ships a local thumbnail and only creates the youtube-nocookie.com iframe after you press Play. That press is the point at which YouTube may set its own cookies.

Cookies and localStorage this site and its scripts use

StorageNamePurposeRetentionBasis
localStorageftf_consentYour granted or denied choice, plus a timestamp and version180 daysConsent / notice; needed to remember Reject
localStorageftf_adbar_closedRemembers that you hid the Adsterra Social Bar so it does not return on reload180 daysConsent
Cookie (GA4)_gaDistinguishes a browser for aggregate page and event counts2 yearsDefault-on analytics; Reject stops requests
Cookie (GA4)_ga_Keeps GA4 session state for the property2 yearsDefault-on analytics; Reject stops requests
Cookie (Clarity)_clckStores the Clarity project and a client identifier for heatmaps and recordings1 yearDefault-on recording; Reject stops requests
Cookie (Clarity)_clskConnects page views in one Clarity session1 dayDefault-on recording; Reject stops requests
Cookie (Microsoft)MUIDMicrosoft user identifier used by Clarity and Microsoft services1 yearDefault-on recording; Reject stops requests
Cookie / localStorage (Adsterra)set on bicea.org and Adsterra demand-partner domainsFrequency capping, fraud prevention, ad selection and measurement; example storage categories only: exact names and vendor domains vary by campaignVaries by vendor and campaign; consult its policyDefault-on advertising; Reject stops requests
Cookie (YouTube)VISITOR_INFO1_LIVE, YSC, PREFExamples of YouTube playback and preference cookies; actual storage varies with browser, region and playbackSession to 6 monthsConsent by pressing Play
CacheInter and Bebas Neue font filesShipped with the site; no Google Fonts requestCached with the pageNecessary to render text

What each third party receives

  • Google Analytics 4 (Google LLC, www.googletagmanager.com and *.google-analytics.com) receives the page URL, referrer, a truncated IP-derived location, device and browser information, and interaction events. We use it for aggregate traffic counts, not to identify you. We have not independently verified the property retention setting; Google controls its service-side retention.
  • Microsoft Clarity (Microsoft Corporation, www.clarity.ms, scripts.clarity.ms, *.clarity.ms and Microsoft cookie-sync hosts such as c.bing.com) receives page structure, clicks, scrolls, and a session recording with form inputs masked by default. We use it to see where the guide is hard to read. Project retention has not been independently verified. See the linked Microsoft policy for its retention practices.
  • Adsterra (Adsterra Network, bicea.org and its demand-partner domains) receives the page URL, user agent, approximate location, and cookie or localStorage identifiers so it can serve the Native Banner and Social Bar, cap frequency, detect fraud, and measure impressions. Adult ads are switched off for this site. We do not pass your email or Roblox account to Adsterra.
  • YouTube (Google LLC, www.youtube-nocookie.com) receives the video id and normal request data only after you press Play. We use the privacy-enhanced no-cookie host, but YouTube may still set cookies when playback starts.
  • Our host serves the static files and keeps standard access logs (IP, time, path, status) for security and capacity. We do not run Cloudflare Insights or any other analytics or banner SDK on this site.

Legal basis and your rights

  • This release uses a default-on notice, not an affirmative opt-in before loading. ftf_consent records your Accept or Reject choice. Reject stops optional tags for 180 days. The technical behavior described here is not a claim that a default-on notice satisfies every jurisdiction; do not submit personal information through ads or recordings.
  • For the consent record itself and basic security logs we rely on the legitimate interest of remembering your choice and keeping the site online. Those records are not used for advertising.
  • You can ask what we hold, request a copy, or ask us to delete it by emailing [email protected]. Most of what we hold is the ftf_consent and ftf_adbar_closed records on your own device; you can delete them in your browser at any time.
  • You can object to analytics or advertising, withdraw consent, or ask for restriction by using Reject, Cookie settings, or the opt-out links below. You also have the right to complain to your local data-protection authority.
  • We do not knowingly collect data from children under 13. The game is popular with younger players, so we keep the site informational, do not run accounts, and mask Clarity form inputs by default.

Personalized advertising opt-outs

  • Adsterra and its demand partners may personalize ads using cookie identifiers. Use Reject on this site to stop the Adsterra scripts here, then use the industry opt-outs for other sites: Google Ad Settings at adssettings.google.com, Your Online Choices at youronlinechoices.com, and the Network Advertising Initiative at optout.networkadvertising.org.
  • Adsterra privacy policy and data requests: adsterra.com/privacy-policy/. Microsoft privacy: privacy.microsoft.com. Google privacy: policies.google.com/privacy.
  • Opt-out cookies are themselves stored in your browser. If you clear cookies, the opt-out may need to be set again. GPC is honored automatically by this site and is a more durable signal where your browser supports it.

Changes and contact

We will change this policy on this URL and bump the checked date when a script, cookie name or retention period changes. Old aliases /privacy-policy/, /cookie-policy/ and /cookies/ redirect here. The footer Cookie settings button reopens the banner so you can change your choice without hunting through browser settings.

Questions about this policy: [email protected]. We answer privacy mail at that address; there is no separate ticketing system.

Questions

Do you sell personal data?

No. We do not sell a list of visitors. Adsterra and its demand partners may use cookies to select and measure ads, which is described below and can be turned off with Reject or the opt-out links.

How do I change my choice?

Use Cookie settings in the footer. Reject stores a denied choice in localStorage under ftf_consent for 180 days and reloads into a document that does not request GA4, Clarity or Adsterra. This also stops timers and child requests from previously executed scripts. Accept stores granted instead.

Do the scripts wait for me to press Accept?

No. On a first visit with no stored choice, this site treats the optional scripts as granted and loads them, then shows the banner as a notice with Accept and Reject. Press Reject to withdraw. This is the default-on setting described in the table.

Keep going

Sources