Privacy Policy

Overview

CrimsonDesert.app ("the Service") is a fan-made companion website and mobile app for the video game Crimson Desert by Pearl Abyss. We are not affiliated with Pearl Abyss. This policy explains what data we collect, why, and how we handle it.

Data We Collect

When you use the app without signing in:

• No personal data is collected.
• Map preferences and marker progress are stored locally on your device.
• Anonymous, aggregated analytics (page views, feature usage).

When you sign in (optional):

• Email address — from your Google account, used for authentication.
• User ID — a unique identifier to sync your progress across devices.
• Marker progress — which map markers you have marked as found.
• Map annotations — personal notes you add to the map.

How We Use Your Data

• Authenticate your account and sync progress across devices.
• Improve the Service through anonymous, aggregated analytics.
• Serve advertising (website only) to keep the Service free — see "Advertising" section below for details and opt-out options.
• We do not sell your personal data. The mobile app is ad-free and contains no advertising SDKs.

Advertising (Website Only)

The website crimsondesert.app displays ads served by NitroPay and its downstream ad exchanges (including, but not limited to, Google AdX, Amazon Publisher Services, and other IAB-authorized SSPs listed in our ads.txt file). Ads may use cookies and similar technologies to measure performance and show relevant content. The mobile app does not show ads.

GDPR (EU/UK): We rely on your consent, collected through the cookie banner and the Nitro Consent Management Platform (CMP). You can change your choices at any time using the "Manage Consent" link in the site footer.

CCPA (California residents):Although we do not sell personal information in the traditional sense, certain ad-related cookie disclosures may qualify as a "sale" under the CCPA broad definition. You may opt out at any time using the "Do Not Sell My Info" link in the site footer. This is provided pursuant to the IAB CCPA Compliance Framework.

Ad reporting: Each ad includes a small report icon (top-right corner) that lets you flag malicious, inappropriate, or broken ads directly to NitroPay.

Third-Party Services

• Supabase — authentication and database hosting (EU region).
• Google Sign-In — OAuth authentication provider.
• Cloudflare — website hosting and CDN.
• Expo / EAS — mobile app build and OTA update delivery.
• NitroPay (website only) — ad serving, consent management and ad measurement via IAB-authorized exchanges (Google AdX, Amazon Publisher Services, etc.). See NitroPay Privacy Policy.

Data Storage & Security

Your data is stored in Supabase (PostgreSQL) with encryption at rest and in transit. Authentication tokens are stored securely on your device using platform-native secure storage. We do not store passwords — authentication is handled entirely by Google OAuth.

Data Retention & Deletion

Your data is retained as long as your account is active. You can delete your account and all associated data at any time by contacting us at the email below. Upon deletion, all personal data is permanently removed within 30 days.

Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Export your data in a portable format.
• Opt out of ad-related data "sales" under the CCPA via the "Do Not Sell My Info" link in the footer.
• Withdraw or modify advertising consent under the GDPR via the "Manage Consent" link in the footer.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date.

Contact

For privacy-related questions or data deletion requests, contact us at: privacy@crimsondesert.app