Cookie Policy
Last updated: November 11, 2026
Your location decides the default, your choice always wins. We load Google Tag Manager and the Meta pixel to measure visits and the ad campaigns we pay for. In the EU, the UK and Switzerland, nothing that sets a measurement or advertising cookie runs unless you accept (only a security cookie from our anti-robot check is set without consent). Elsewhere, these tags run unless you decline — and a Global Privacy Control signal from your browser counts as declining. No advertising network serves ads here. You can change your choice at any time in Your privacy choices.
What we store in your browser
The consent choice, the result of our anti-robot check, and — only where advertising measurement is allowed for you — a random visitor reference:
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| rc-consent | Local storage | Remembers whether you accepted or declined, so the banner stops asking | Until you clear your browser data |
| rc-vid / rc_vid | Local storage and a first-party cookie | A random reference (no name, no email, no IP) that links your visits to our game pages with a click on a game offer, so we can tell which games and pages interest players and build advertising audiences. Set only if you accepted, or where advertising measurement is allowed by default and you did not decline; removed as soon as you decline. The reference stored with your visits is erased after 90 days. | 90 days |
| rc_hv | First-party cookie | Security: shows that this browser passed Cloudflare Turnstile's human check, so robots cannot trigger our game links. It holds only the date of the check and a signature — no identifier. Strictly necessary, so it is set for every visitor who passes the check, without consent. | 400 days |
| rc_q | First-party cookie | Set together with rc_hv, with the value 1. It holds no identifier. | 400 days |
Local storage stays on your device; the visitor reference (and your choice, so our server can respect it) is sent with your page views.
Where these tags are allowed — see the Analytics and Advertising sections for the Meta cookies, Google's tags additionally set their own cookies on this domain: _ga and _ga_F5C4Q8NV9P distinguish one browser from another so visits can be counted, and _gcl_au attributes a visit to an advertising campaign. They expire on their own, and clearing this site's data removes them along with your stored choice. Decline, and none of them are set.
The Meta pixel sets _fbp (identifies the browser to Meta for ad measurement, about 90 days) and, when you arrive from a Facebook or Instagram ad, _fbc (records that ad click). Same rule: declining, or being in a region where we wait for your consent and not giving it, means they are not set.
Cookies we set
Our own server sets only the two security cookies above (rc_hv, rc_q), once your browser passes the human check. Every other cookie can only reach your browser through a third-party tag, under the regional rule described above. If you decline, none of those is set; in the EU, the UK and Switzerland, not answering counts as declining.
Analytics
Cloudflare Web Analytics counts page views. It is injected by our host, sets no cookie, uses no local storage and no fingerprinting, and reports aggregate numbers only (pages, countries, browsers) — which is why it runs without consent. Separately, clicks on affiliate links and on our own promotional banners are counted on our server without any identifier (see the Privacy Policy).
Google Tag Manager is installed on every page as a container: on its own it stores nothing and measures nothing — it loads the tags we configure inside it. It runs under Google Consent Mode v2. In the EU, the UK and Switzerland our defaults are denied for advertising storage, analytics storage, ad user data and ad personalisation; elsewhere they are granted, except advertising when your browser sends a Global Privacy Control signal. Your answer to the banner, or to the buttons below, overrides the default and is re-applied on every later visit. Declining leaves the tag in its restricted mode, where it may still count an anonymous, cookieless page view but cannot identify you or store anything on your device.
Advertising
No advertising network serves ads on this site: the promotional units you see are our own images, hosted by us, linking to our own pages. They set nothing and are not served by a third party. Separately, our tag container includes Google Ads measurement, which is how we would attribute visits from campaigns we pay for. It sets an identifier (_gcl_au) only where advertising storage is allowed. Where ad personalisation is also allowed, the visit can be added to our Google Ads remarketing audiences, so that Google may later show RigCrate ads to people who visited our game pages — see Advertising audiences in the Privacy Policy. Nothing is added when you decline.
Meta (Facebook, Instagram) receives two kinds of event from us so that our ad campaigns can be measured and optimised: page views, and clicks on links to an offer. They are sent both by the Meta pixel in your browser and, for offer clicks, by our server through Meta's Conversions API — the same event, sent twice so it is not lost to ad blockers, which Meta counts once. The server copy carries your IP address, browser signature and Meta cookie identifiers, and is only sent when advertising is allowed for you under the rule above. We store none of it.
Third parties that do load
Only these, and only where relevant:
- Google Tag Manager (
googletagmanager.com) — described under Analytics. It loads on every page; what it is allowed to do depends on your region and your choice. - Meta pixel (
connect.facebook.net) — described under Advertising. Loaded through our tag container, only where advertising is allowed. - Microsoft Clarity (
clarity.ms) — session recordings and heatmaps used to improve our pages. Loaded only where advertising measurement is allowed for you (see Your privacy choices). It sets the cookies_clck(visitor, 1 year) and_clsk(session, 1 day); typed text is masked. - Cloudflare Turnstile (
challenges.cloudflare.com) — checks in the background, on pages with a game link, that the visitor is a person and not a robot. Cloudflare processes technical signals from your browser and your IP address for this check only; it is not used for advertising or to build a profile. It is a security measure, which is why it does not need your consent. - Cloudflare Web Analytics (
static.cloudflareinsights.com) — a small script injected by our host to count page views. It sets no cookie and uses no local storage or fingerprinting, which is why it does not need your consent. - Google Fonts (
fonts.googleapis.com,fonts.gstatic.com) — loads the typefaces used across the site. Google receives your IP address as part of that request. No cookie is set by this. - YouTube (
youtube-nocookie.com) — only on articles that embed a video. We use YouTube's privacy-enhanced mode, which means YouTube stores nothing until you actually press play. If you never play the video, nothing is stored.
Affiliate links
Some links take you to retailers such as Amazon or GOG. We set nothing when you click. Once you arrive on the retailer's site, that retailer applies its own cookies under its own domain and its own policy — the same as if you had typed their address directly. See our Privacy Policy for how affiliate links work and what we do and don't learn from them.
Your privacy choices
This choice applies to analytics and advertising tags on this browser, including the sharing of offer-click events with Meta for advertising (what US state laws call "sale" or "sharing"). It takes effect immediately and is remembered on this device.
Clearing your browser's site data for this domain removes the rc-consent entry and brings back the regional default. Cookies already set by Google or Meta expire on their own, or with that same clearing.
Questions
Write to contact@rigcrate.com.