Privacy Policy

Data collection

UTDX Strategy Hub is an independent fan guide for Universal Tower Defense X codes, unit data, builds, wave planning, reroll choices, maps, and beginner routing. The site does not require account signup, payments, comments, Roblox login, or a player profile. You can read the guides without sending private game data. The DPS calculator runs in your browser and uses selected units, levels, and buff checkboxes locally to produce a planning number. Those calculator inputs are not sent to a custom server by this static site.

Do not enter Roblox passwords, account recovery details, exploit tools, private server sales pitches, or private Discord screenshots into any site field. If you send a correction, keep it narrow: page URL, exact claim, public source, and what changed after the latest UTDX update.

Cookies and consent

The production site uses a small consent banner and a default-denied Google Consent Mode v2 pattern. Analytics and advertising storage should begin denied and change only after the visitor makes a choice. If consent is denied or no choice is made, normal analytics storage should stay disabled. A local consent preference may be saved in the browser so the banner does not repeat on every page. That preference is used for privacy handling only and is not a Roblox account identifier.

You can also block cookies, clear local storage, disable JavaScript, use browser privacy extensions, or leave the site before optional scripts load. Disabling JavaScript may reduce calculator and table-filter features, but the main guide text remains readable.

Third-party services

Cloudflare hosts and delivers the site, so Cloudflare may process routine CDN and security logs such as IP address, user agent, requested path, referrer, and abuse-prevention signals. Google Analytics 4 is installed with measurement ID G-2M0JF6EEK2 to understand aggregate traffic, page usefulness, navigation problems, and which guides need updates. The homepage uses an Adsterra Native Banner placement, zone pl29392007, embedded inline on the page. The site does not use popunders, interstitials, forced redirects, auto-download prompts, or fake system warnings.

Advertising and analytics do not decide code status, unit ranking, or build advice. A code needs source evidence, a unit role remains labelled when modelled, and uncertain DPS values stay separate from official data. Monetization should not turn a strategy page into a fake reward list or hide assumptions.

Opt-out and corrections

To limit measurement, reject the banner, block cookies in your browser, use analytics opt-out tools, or clear local storage after visiting. For advertising controls, use browser privacy settings and any choices presented by the ad network. Correction messages may be kept long enough to verify the issue and update a page, then handled as ordinary editorial correspondence rather than account data.

This policy is updated when the production stack changes in a way that affects analytics, advertising, hosting, consent behavior, or correction handling. The privacy scope is limited to this UTDX site: how it measures aggregate traffic, displays homepage advertising, runs local calculators, and receives corrections.

Data retention

Server access logs (Cloudflare CDN/security): purged after 30 days in routine rotation. Google Analytics 4 aggregated event data: retained for 14 months (GA4 default) before automatic deletion. IndexNow and search engine submission logs are kept for 90 days for index troubleshooting. Aggregated, fully anonymised statistics (e.g., daily pageview totals) may be retained indefinitely because they cannot identify a visitor.

Correction emails are retained only as long as needed to verify the issue and update the affected page, then handled as ordinary editorial correspondence. We do not maintain a user database, mailing list, or account system for this site.

Legal basis for processing (GDPR Article 6)

For EU and UK visitors, processing on this site rests on the following GDPR Article 6 bases. Art. 6(1)(b) performance of an information service: serving the requested guide page. Art. 6(1)(f) legitimate interest: anonymised aggregate analytics, abuse-prevention and security logs, and basic CDN operation, balanced against the limited intrusion on visitors. Art. 6(1)(a) consent: any optional analytics or advertising storage is governed by the Consent Mode v2 default-denied banner pattern described above.

We do not transfer personal data outside the EEA as a primary processing activity. Cloudflare and Google operate global networks under their own published transfer mechanisms (Standard Contractual Clauses, EU-US Data Privacy Framework, etc.) and we rely on those mechanisms for any incidental routing.

Data subject rights and DPO contact

EU/UK residents have rights under GDPR Articles 12 to 22, including the rights of access, rectification, erasure, restriction, portability, and objection. Because this site does not maintain accounts or user profiles, most requests resolve quickly via aggregate-data exclusion or browser-level controls (cookie clearing, GA4 opt-out browser add-on). For specific requests, contact [email protected]. We aim to acknowledge within 7 days and resolve within 30 days of receipt, per GDPR Article 12(3).

If you believe processing is unlawful, you have the right to lodge a complaint with your local supervisory authority (e.g., ICO in the UK, CNIL in France, your national DPA in other EEA states).

Children's privacy (COPPA / GDPR-K)

This site is a fan guide for a Roblox game with a mixed-age audience, but it is not directed at children under 13 and does not knowingly collect personal information from children under 13 (COPPA, US) or under 16 (GDPR-K, applicable EEA member states). We do not run account signup, comments, file upload, or message boards that would capture child-identifying input.

Parents and guardians who believe a child has nonetheless provided personal information through a feedback channel can contact [email protected] and we will delete the message and any related logs.

Cookies and advertising partners

This site displays a Native Banner ad placement via Adsterra on the homepage. For information on how Google uses data when you use partner sites and apps, see Google's partner-site policy. To adjust Google advertising preferences, visit Google Ads Settings. For broader interest-based advertising opt-outs, visit AboutAds.info (Digital Advertising Alliance) or YourOnlineChoices.eu (European Interactive Digital Advertising Alliance).

EU/EEA visitors are shown a consent banner before any advertising or analytics storage is enabled, consistent with the GDPR Consent Mode v2 default-denied pattern described above. You may withdraw consent at any time by clearing your browser's local storage for this site or using the browser's privacy controls. This policy was last updated 2026-05-31.