Matches the scripts on the page · Updated 2026-10-07 · Facts checked 2026-10-07

Break and Steal an Egg guide privacy policy

Source: Roblox experience page · Supporting sources below

I wrote this policy against the pages as they are built on 7 Oct 2026. The HTML loads one measurement script, a cookieless Google Analytics 4 tag, plus a first-party consent stub. There is no advertising script and no session recorder. YouTube loads only after you press play and allow videos. If that changes, this page changes in the same edit.

Break and Steal an Egg Roblox icon
Official Roblox icon, saved 2026-10-07.
Break and Steal an Egg Roblox thumbnail of the lava egg and a block chicken
Official Roblox thumbnail 1, 768×432, saved 2026-10-07.

Who is responsible

The site is breakandstealanegg.pro. Contact is [email protected], also on the contact page. I do not sell personal data, and I do not have user accounts.

What loads, and what does not

Fonts and images are bundled with the site. The homepage requests /api/game-status on this host, and the server fetches Roblox’s public Games API. That server request does not forward your browser cookies or IP to Roblox. Outbound links to Roblox, Discord, YouTube watch pages, and source articles are ordinary navigation links.

There is no AdSense unit, no Adsterra unit, and no Microsoft Clarity tag in the page source. The head of each page first defines a function named gtag and records a Consent Mode default of denied for ad_storage, ad_user_data, ad_personalization, and analytics_storage, with ads_data_redaction and url_passthrough switched on. After that stub it requests the Google tag file for measurement id G-JZZW7PEPHT and calls gtag config. Nothing ever sets analytics_storage back to granted, so the tag stays in cookieless mode: hits go to google-analytics.com without reading or writing analytics cookies, and no separate analytics opt-in is shown.

Third parties that can receive a request from this site, and when.
NameWhenPurpose
Google / YouTube: www.youtube-nocookie.com, www.youtube.com, i.ytimg.com, s.ytimg.com, *.googlevideo.com, *.ggpht.com, *.google.com, *.gstatic.com, *.googleapis.com, *.doubleclick.netOnly after video consent and a play requestPlayer, thumbnails, streaming, player fonts and playback telemetry; YouTube may make advertising requests inside its own player
Google Analytics 4: www.googletagmanager.com, *.google-analytics.com, *.analytics.google.comOn every page load, in cookieless modePage-view measurement under Consent Mode defaults of denied; no analytics cookie is read or written
CloudflareWhen the site is served from Cloudflare Pages; for mail sent to the contact addressHosting request metadata and Email Routing to the site mailbox; no Cloudflare analytics beacon is installed
Roblox, Discord, news sitesOnly if you click an outbound linkTheir own sites, not our embed

Storage on your device

Key basae_consent in localStorage. Value is JSON with version 1, a video boolean, and an exp timestamp. Retention is 180 days from the moment you choose. The next visit after expiry deletes it. Reject stores video:false for the same 180 days so the banner does not nag. I do not set a first-party cookie for this. I do not use other localStorage keys. Google Analytics 4 sets none of its usual analytics cookies here, because analytics_storage stays denied and the tag runs cookieless.

YouTube, once the iframe is allowed, receives your IP address, browser metadata and playback interactions, and can use storage under Google’s rules. Privacy-enhanced mode does not make the player request-free or anonymous. A saved video choice never loads a player by itself: you must also press play. Their document is the Google privacy policy. Google services can process data outside the EEA; consult that policy for their transfer safeguards.

Legal basis, rights, and ads choices

Serving the page is a legitimate interest in publishing a guide, and it does not require an account. The YouTube embed is consent. You can withdraw it any time with Cookie settings in the footer, which reopens the same banner. Global Privacy Control (navigator.globalPrivacyControl) forces the optional embed to stay off and disables the checkbox. I do not run personalized ads, so a Do Not Track header has no ad cookie here to disable. The same GPC path is what I honor.

You can ask for access, correction, or deletion of any email you sent me. Write to [email protected]. I keep mail long enough to answer and to fix a page, then delete it. I have nothing else to export. If you are in the EEA or UK you can also complain to your supervisory authority.

Personalized-ad controls, if you want them for the rest of the web: https://adssettings.google.com/ , https://optout.aboutads.info/ , and https://www.youronlinechoices.eu/ . They do not change this site, because this site does not request an ad.

Changes

The date at the top of this page is the policy date. A new third-party script does not ship unless its name, purpose, and storage are added here in the same change. Cookie settings stays in the footer on every page.

Questions

Do you use cookies?

The site itself stores the consent choice in localStorage under basae_consent, not in a cookie. Google Analytics 4 runs with analytics_storage denied, so it sets no analytics cookie either. YouTube may set cookies only after you load a video.

How do I change my mind?

Use Cookie settings in the footer. The choice lasts 180 days.

Keep going

Sources