Privacy

What loads, and when

crimsondesert.run is a static guide. Reading a page does not require an account, and we do not sell personal data directly. Three third-party services are wired into every page: Google Analytics 4, Microsoft Clarity and Adsterra. All three start on the first page view, before you answer the banner. The banner is a notice and a withdrawal control, not a gate: Accept keeps them on, Reject turns them off and stores that denial for 180 days. Cookie settings in the footer reopens the same choice. A trailer is the only other third-party frame, and it waits for a play click.

The page head sets Consent Mode v2 before the Google tag is configured: ad_storage, ad_user_data and ad_personalization default to denied; analytics_storage defaults to granted. ads_data_redaction is enabled. The default signals are queued before any config call. The page then applies the default-on service preference: with no stored denial, the service loaders request their scripts immediately while the banner remains visible. If you have rejected, or your browser sends Global Privacy Control, the same block immediately moves all four signals to denied and the loaders below return before creating a tag. Reject also reloads the page, so the refusal is applied to the document you are reading, not only to the next one.

Google Analytics 4

Google Analytics 4 (Google Ireland Limited; hosts www.googletagmanager.com and *.google-analytics.com), measurement ID G-6G9B3GF6CD, property website_319_gameinfo_crimsondesert.run. Purpose: count page views and see which guides are read, so thin or broken pages can be fixed. Storage, first party on crimsondesert.run: _ga (about 13 months) and a per-stream _ga_<container-id> cookie (about 13 months). Google Analytics retention for event data depends on the property settings; aggregated reports can live longer. The services are enabled by default; the banner records your preference and Reject disables subsequent requests after reloading. Opt out with Google's Analytics opt-out browser add-on, or reject here. Google's ad settings cover personalised advertising on Google services: https://myadcenter.google.com/.

Microsoft Clarity

Microsoft Clarity (Microsoft Corporation; hosts www.clarity.ms, scripts.clarity.ms and *.clarity.ms), project z7ojspdsa1. Purpose: heatmaps and anonymised session recordings, so a confusing page can be watched instead of guessed at. Clarity masks form inputs and other sensitive content by default. Storage: _clck (about 12 months), _clsk (about 1 day) and MUID on .clarity.ms (about 13 months, set by Microsoft). Microsoft's retention schedule applies to recordings, heatmaps and aggregated data. The services are enabled by default; the banner records your preference and Reject disables subsequent requests after reloading. Microsoft's privacy statement covers the rest: https://privacy.microsoft.com/privacystatement.

Adsterra advertising

Adsterra (Adsterra Ltd; delivery host bicea.org; creative delivery may also use cdn.show-creative1.com, cdn.show-sb.com, cdn.cloudpiko.com and static.nresystems.com), publisher 3403020, website 6171226 (crimsondesert.run, category Social). Two units exist for this site: NativeBanner_1, unit 32064225, an in-page Native Banner served from https://bicea.org/21/0194b9a0fae761ab3cd2e1a3fa3a6d02, and SocialBar_1, unit 32064226, a fixed Social Bar served from https://bicea.org/14/1e67957306f158af6edcc35df47c198f. There is no Popunder, Banner or Smartlink unit, and adult ads are switched off for this website in the Adsterra dashboard.

Storage: the delivery host may set its own identifiers on bicea.org, and each creative host may set or read its own cookies once a creative is served. Those names and lifetimes belong to Adsterra and its demand partners, not to us; we set nothing on your device for advertising. Legal basis: consent for personalised advertising, and legitimate interest in serving non-personalised advertising that funds the guide. To opt out of interest-based advertising across sites, use https://optout.aboutads.info/, https://optout.networkadvertising.org/ and, in the EU, UK or Switzerland, https://www.youronlinechoices.com/. Adsterra's own policy is at https://adsterra.com/privacy-policy-managed/. Reject here stops new ad requests from this site on the next page view.

The fixed Social Bar is constrained by our own code, not by the vendor's close control: whatever Adsterra anchors to the window is clamped to the viewport (max-width 100vw, border-box, overflow hidden), the document reserves room at the bottom so the bar cannot cover the footer, and the close button stores that decision in cd_ad_float_closed for 180 days so the bar stays away on later visits instead of only until the next refresh.

Storage keys this site writes

cd_consent, in local storage (not a cookie). Value: granted or denied, a timestamp and the 180-day lifetime. Purpose: remember your banner choice and keep Reject in force. Legal basis: your selection, or a Global Privacy Control signal, which is stored as denied without asking again. cd_ad_float_closed, in local storage. Value: a timestamp, 180-day lifetime. Purpose: keep the Adsterra Social Bar closed after you press its close button. Pressing Accept after reopening Cookie settings clears this key, so the bar can return. Global Privacy Control is treated as a refusal: with that signal set, all four Consent Mode signals are denied, the three loaders do not run, and the banner does not ask again.

YouTube, only after a click

YouTube (Google LLC; hosts www.youtube-nocookie.com, www.youtube.com, i.ytimg.com and Google video delivery hosts). Purpose: play a Crimson Desert trailer. A trailer is a locally hosted image until you press the play button; that click inserts the player and is consent for that embed. YouTube may then set its own cookies, such as VISITOR_INFO1_LIVE, YSC and PREF, and may use local storage on its domain; Google's retention applies. This embed is not blocked by the consent banner and is not loaded by it.

Other third parties, mail, and your rights

There is no traffic-mesh or other consent-banner SDK on this site, no Google AdSense tag, no second ad network, no social embed and no third-party font host: fonts and images are files on this host. The hosting provider may process request metadata such as IP addresses for delivery and security; provider retention settings apply. We do not operate a separate access-log collection script. Mail you send to [email protected] is read so I can answer it and kept only while the thread is useful. You can ask for access, correction or deletion of that mail, object to processing based on legitimate interest, or withdraw consent here at any time. For advertising and analytics data the controllers are the providers named above; the opt-out pages above reach them, and we will forward a request sent to [email protected]. You may also complain to your local data protection authority. Changes are posted on this page with a new date; the current date is 3 November 2026, the day these three integrations and this policy were written.