NexRide (Roblox) privacy policy

Who is responsible

The site operator is the editorial desk at [email protected]. There is no separate company name on this domain. Write to that address for access, correction, deletion, or an objection to the processing described here.

The site is a fan guide for the Roblox experience NexRide [DIRTBIKES]. It has no user accounts, no checkout, and no newsletter form.

Which third parties load, and why

These are the only third-party scripts on the built pages. Self-hosted fonts and images come from nexride.xyz and are not a third party.

No Google AdSense, no Popunder, no Smartlink, no Taboola, and no traffic-mesh banner SDK is present in this build. ads.txt declares only adsterra.com.

Observed delivery hosts — checked 27 Oct 2026

Google Analytics: www.googletagmanager.com and www.google-analytics.com. Microsoft Clarity: www.clarity.ms, scripts.clarity.ms, and regional collection hosts a.clarity.ms through z.clarity.ms; the selected collector varies between visits. These scripts load by default; Reject disables measurement and prevents Clarity from loading after the reload.

Adsterra placements request bicea.org. Their first-visit delivery chain also requested static.nresystems.com, cdn.show-creative1.com, cdn.show-sb.com, cdn.cloudpiko.com and cdn.storageimagedisplay.com. These are advertising delivery, creative or measurement partners, not separate site features. They load by default through Adsterra and stop with Reject. Partner ownership and vendor-internal storage lifetimes were not independently verified. The chain may vary by region or creative.

YouTube: www.youtube.com is requested only after pressing Play video. That action loads the Google video player and its media delivery hosts, including googlevideo.com and ytimg.com. No YouTube player or thumbnail request is made before the click; preview thumbnails are hosted on this site.

Default load, and how Reject works

GA4, Clarity and Adsterra load on the first page view, before you touch the banner. The banner is a notice and a withdrawal control, not a gate. Nothing on this site waits for an Accept click before loading these tags.

With no saved choice, the ad and recording loaders run and the banner appears. Google Consent Mode defaults are separate: ad_storage, ad_user_data and ad_personalization are denied; analytics_storage is granted. These defaults run before config, with ads_data_redaction enabled. Accept grants all four Google signals. Reject writes denied to nx_consent for 180 days, disables GA4 measurement, expires accessible first-party measurement cookies, sends Clarity a stop command, removes the ad nodes and reloads. The reloaded page creates no Clarity or Adsterra tag. GA4 library requests may still occur with measurement disabled. A withdrawal cannot undo data already sent or delete vendor-domain cookies.

Press Accept to keep the tags on. Cookie settings in the footer reopens the banner at any time, so a Reject is reversible.

If the browser exposes navigator.globalPrivacyControl as true, or sends Do Not Track as 1, the page treats that as Reject without waiting for a click.

Cookies and localStorage in detail

localStorage nx_consent — JSON with choice (granted or denied), ts, exp, and the four Consent Mode signals ad_storage, ad_user_data, ad_personalization and analytics_storage. Retention: 180 days; after that the record is treated as missing and the default-on path runs again.

localStorage nx_socialbar_closed — an expiry timestamp written only when you press the × on the Adsterra Social Bar. Retention: 180 days. The bar stays closed across reloads and visits until that timestamp passes.

GA4 first-party cookies: _ga (client id, 2 years) and _ga_T216224G98 (session state, 2 years). GA4 also reads and writes its consent state through the gtag Consent Mode API; no separate cookie is used for the banner choice.

Clarity may use first-party cookies _clck (up to 1 year) and _clsk (up to 1 day). Other SDK storage can vary; we do not claim a complete inventory of vendor-internal keys.

Observed ad SDK cookie names on the test origin include sb_main_808e26c4153596d7de2a16a03fa00853 and sb_count_808e26c4153596d7de2a16a03fa00853. Other opaque identifiers also appeared, but their ownership was not verified, so no vendor attribution is asserted. Adsterra may also store identifiers on bicea.org and its delivery partners. A complete vendor cookie inventory and retention periods were not verified in this audit and are not estimated here. Reject stops further tag loads; previously stored vendor cookies remain subject to that vendor and your browser settings.

The host may keep standard access logs (IP address, user agent, requested path, timestamp) for security and abuse prevention. I do not combine those logs with the analytics reports.

Advertising, personalization, and opt-outs

Adsterra and its demand partners may use the ad cookies to limit repetition, measure clicks, and choose creatives. Where local law allows it, those creatives can be personalized. Adult ads are disabled for this website in the Adsterra panel.

You can object to personalized advertising with the industry opt-out pages: Google Ads Settings https://adssettings.google.com/ , AboutAds https://optout.aboutads.info/ , Your Online Choices https://www.youronlinechoices.eu/ , and the NAI choice page https://www.networkadvertising.org/choices/ . Adsterra's own privacy notice is at https://adsterra.com/privacy-policy-managed/ .

Opting out of personalization does not stop ads; it makes them less relevant. The Reject button on this site stops the Adsterra tags altogether.

Your rights and retention

You can ask for a copy of any message you sent us, ask for its deletion, or object to the analytics and advertising processing described above. Write to the contact address; I answer privacy requests there.

Site-controlled browser storage is listed above; vendor SDK storage can vary. There is no account database and no profile that can be exported. Deleting the nx_consent and nx_socialbar_closed keys, plus the _ga*, _clck and _clsk cookies, returns the site to a first-visit state.

If you are in the EEA or the UK, you may also complain to your local data-protection authority. I will cooperate with a verified request, subject to the legal limits on keeping security logs.

Children

Roblox is played by minors. Do not email a child's personal details. If you believe a message contains them, write to the contact address and I will delete it. The site does not ask for a name, age, or account login.

Changes to this policy

A change to this page updates article:modified_time. The date on this build is 27 Oct 2026. If a new third party is added, its name, storage keys and retention are added to the table above in the same commit as the tag.