What this site loads, and what it doesn’t

In one sentence

The site sends no advertising trackers and no social-media pixels. It loads exactly two third-party services — an analytics beacon and, after you explicitly click play, a YouTube player.

1 · Cloudflare Web Analytics

Cloudflare Pages serves this site and injects Cloudflare’s Web Analytics beacon. [Cloudflare Web Analytics docs] It records page views, referrers and country-level audiences without cookies and without fingerprinting— Cloudflare markets the product as privacy-preserving (“no individual tracking”). We deliberately skipped GA/GTM to avoid advertising pixels entirely; if you disagree, the beacon can be blocked and the page still works perfectly.

2 · Click-to-load YouTube

Two pages embed official videos behind a local poster image. Until you press play, no request is sent to YouTube. Once you click, YouTube’s iframe loads from youtube-nocookie.com and YouTube then applies its own privacy terms, possibly setting your country’s consent flow. The rules pages deepen-link to chapters via plain links (a YouTube page opens in a new tab on click only).

3 · What we store

Nothing about you. There is no login, no account, no newsletter, no form data. Server-side access logs are handled by Cloudflare Pages under Cloudflare’s own privacy policy — we do not export or profile them.

4 · Emails you send us

If you email corrections to contact@hogwartsdefenders.com, we keep the correspondence and may quote it (attributed or not — your choice, tell us) when we publish the correction.

5 · Consent picture

Because Web Analytics is cookieless, we have chosen not to add a consent banner. YouTube receives dataonly after an explicit click, which we treat as the consent event itself in line with normal click-to-load practice. If you need strict GDPR behaviour, block the beacon; everything else renders without either third party.