Privacy Policy for END WIKI

Last updated: 2026-04-25

This Privacy Policy describes how we collect, use, and share your personal data when you visit our website (the “Site”). END WIKI is operated as a personal, non-commercial fan project. We respect your privacy and aim to comply with global standards including the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act as amended by the CPRA (collectively, “CCPA”).

1. Information We Collect

When you visit the Site, we and our third-party service providers may automatically collect:

  • Technical data: IP address, browser type and version, device type, operating system, referring URL, language preference.
  • Usage data: pages visited, time spent, clicks, and approximate geographic location derived from your IP address.
  • Cookies and similar technologies: see Section 2.

We do not require account registration and do not intentionally collect names, email addresses, or other directly identifying information unless you voluntarily contact us (see Section 8).

2. Cookies and Advertising

We use Google AdSense to display advertisements on the Site. Google, as a third-party vendor, uses cookies (including the DoubleClick DART cookie and other identifiers) to serve ads based on your prior visits to this Site and other sites on the Internet.

We also use Microsoft Advertising (including the Microsoft Audience Network). Microsoft, as a third-party vendor, uses cookies (including the MUID identifier and similar technologies) to serve and measure ads based on your browsing activity.

Third-party vendors and ad networks, including Google and Microsoft, may use cookies, web beacons, and similar technologies to collect or receive information from this Site and elsewhere on the Internet, and use that information to provide measurement services and target ads.

You can opt out of personalized advertising at any time:

For users in the European Economic Area (EEA), the United Kingdom, and Switzerland, we use a Google-certified Consent Management Platform (CMP) and Google Consent Mode v2 to obtain your consent for non-essential cookies (including advertising and analytics cookies) before they are set. You may withdraw or modify your consent at any time via the cookie preferences link in the Site footer.

3. Analytics and Other Third-Party Services

  • Google Analytics — measures Site traffic and usage. Default retention: 14 months. We have IP anonymization enabled where applicable.
  • Cloudflare — provides CDN, DDoS protection, and bot mitigation. Cloudflare may process your IP address and request metadata to protect the Site from malicious activity.
  • Sentry (if active) — captures runtime errors to help us fix bugs; may include IP address and user-agent.

These providers act as our processors or independent controllers under their own privacy policies, which we encourage you to review.

Where GDPR applies, we rely on the following legal bases:

  • Consent (Art. 6(1)(a)) — for non-essential cookies, personalized advertising, and analytics in the EEA/UK.
  • Legitimate interests (Art. 6(1)(f)) — for Site security, fraud prevention, basic traffic measurement, and ensuring service availability.

5. International Data Transfers

Our service providers (including Google, Microsoft, and Cloudflare) are based in the United States and may transfer your data outside the EEA/UK. Such transfers are safeguarded by the EU–US Data Privacy Framework (where the recipient is certified — Google, Microsoft, and Cloudflare are all currently certified) and/or the European Commission’s Standard Contractual Clauses (SCCs).

6. Data Retention

  • Server and CDN access logs: retained by Cloudflare per their default policy (typically a few hours to days for raw logs).
  • Google Analytics user-level data: 14 months (default).
  • Google AdSense cookies: up to 13 months.
  • Microsoft Advertising cookies (e.g., MUID): up to 13 months (default).
  • Email correspondence (if you contact us): retained until the matter is resolved, then deleted within 24 months.

7. Your Rights

European Users (GDPR / UK GDPR)

You have the right to:

  • access, rectify, or erase your personal data;
  • restrict or object to processing;
  • data portability;
  • withdraw consent at any time (without affecting the lawfulness of prior processing);
  • lodge a complaint with your local data protection authority.

California Users (CCPA / CPRA)

You have the right to know, delete, correct, and limit the use of your personal information, and to opt out of “sale” or “sharing” of personal information.

We do not sell your personal information for monetary value. However, our use of Google AdSense and Microsoft Advertising for personalized advertising may qualify as “sharing” for cross-context behavioral advertising under CPRA. You may opt out by:

  1. enabling the Global Privacy Control (GPC) signal in your browser, which we honor automatically; or
  2. disabling personalized advertising at https://adssettings.google.com (Google) and https://account.microsoft.com/privacy/ad-settings (Microsoft); or
  3. using the cookie preferences link in the Site footer.

We do not discriminate against users who exercise their privacy rights.

To exercise any right, contact us at the address in Section 8. We will respond within the timeframes required by applicable law (30 days under GDPR; 45 days under CCPA, extendable once).

8. Children’s Privacy

The Site is not directed to children under the age of 13 (or 16 in certain EEA jurisdictions where a higher age applies under national law). We do not knowingly collect personal information from children below this threshold. If you believe a child has provided personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the latest revision. Material changes will be highlighted on the Site homepage for at least 30 days.

10. Contact Us

For privacy-related inquiries, including requests to exercise your rights:

Email: [email protected]

We will respond within 30 days (GDPR) or 45 days (CCPA) of receiving a verifiable request.