Mountain Ridge ATV
Privacy Policy
Effective date: August 14, 2026
Important:
This page explains how this website collects and uses information. It is a technical disclosure, not legal advice. It does not guarantee compliance with GDPR, CPRA, LGPD, or any other law. Have qualified counsel review it before you rely on it.
This Privacy Policy describes how Mountain Ridge ATV Park (“we”, “us”) collects, uses, protects, and shares information when you visit or use Mountain Ridge ATV. That includes browsing the site, submitting forms, making purchases, using online services, or contacting us.
Who is responsible
The organization responsible for this website is Mountain Ridge ATV Park.
Email: info@mountainridgeatvtrails.com
517 Boone Rd, Central City, PA 15926
Submit a privacy or data rights request
Do Not Sell or Share My Personal Information
Your privacy choices
You can manage optional cookies and similar technologies at any time with Cookie Settings on this website. Choose Accept All, Reject All (essential only), or Customize.
Under California law (CCPA / CPRA) and certain other US state privacy laws, you may also opt out of the “sale” or “sharing” of personal information. That can include some advertising uses. We do not sell personal information for money in the everyday sense. Some laws define sale or sharing more broadly. Use the Do Not Sell or Share link above when it is provided, the rights sections later on this page, or contact us to make that request.
Cookie Policy. How cookies work and how to change cookie choices.
Information we collect
We may collect information you provide directly. We may also collect information automatically through your browser or device. Third-party tools used to operate, secure, analyze, and improve this website may collect information as well.
Information you provide may include your name, email address, phone number, mailing address, billing or shipping address, and company name. It may also include account details, form responses, messages, appointment requests, order details, payment-related information handled by payment providers, uploaded files, survey answers, support requests, newsletter signups, and anything else you choose to submit.
Information collected automatically may include IP address, browser type, device type, operating system, and approximate location. It may also include pages visited, time on pages, links clicked, referring website, search terms, session activity, form interactions, shopping cart or checkout activity when e-commerce is enabled, performance data, security logs, and error logs.
How we use information
We may use collected information to operate this website, respond to inquiries, and provide customer service. We may also use it to process orders or requests, send confirmations or transactional messages, and manage appointments or bookings.
We may use it to improve website performance, analyze visitor behavior, prevent fraud, protect against spam or abuse, and secure the website. Where allowed, we may measure advertising performance and improve marketing. We may also use information to comply with legal obligations and enforce applicable terms or policies.
Legal bases for EEA, UK, and similar laws
Where GDPR or similar laws apply, we process personal data under one or more of these bases. Consent covers optional cookies, analytics, marketing, and similar tools. Contract covers providing requested services. Legal obligation covers required processing. Legitimate interests cover securing the site, preventing fraud, and improving essential operations, balanced against your rights and interests.
Where required, non-essential cookies, analytics, advertising, session replay, heatmaps, and similar technologies run only after you provide consent through our cookie banner or privacy controls. You may withdraw consent at any time.
Cookies and tracking technologies
This website may use cookies, pixels, scripts, tags, server logs, local storage, session storage, and similar technologies. These help the website function, remember preferences, secure sessions, prevent fraud, analyze traffic, and measure performance. Where allowed, they may also support advertising or marketing.
- Strictly necessary. Security, login sessions, form protection, cart or checkout when applicable, consent storage, load balancing, and bot protection.
- Analytics and statistics. Understand how visitors use the site, including pages, duration, and interactions, so we can improve content and performance.
- Marketing and advertising. Measure ad performance, conversions, audiences, or retargeting where used and permitted.
- Functional and preferences. Embeds, maps, videos, chat, accessibility tools, saved preferences, and similar enhancements.
See the Cookie Policy for the live cookie and technology inventory.
What this site uses
The following sections come from privacy scans, active plugins, and the local vendor catalog on this website. Re-scan and regenerate pages after major changes so the lists stay current.
Inventory from last privacy scan and plugin map: 2026-08-14 10:59:23
Cookies observed on this site
Names, services, categories, and purposes from the latest scan. Entries are enriched with the local vendor catalog when a match is known.
| Cookie |
Service or provider |
Category |
Purpose |
Consent |
cf_clearance |
Cloudflare |
Essential / Necessary |
Clearance after Cloudflare challenge. |
Essential |
csrf_token_4820b6983c11e3e82cd34f298aa4e5180c339a355c935609a3d470bee67a920c |
Site/authentication system |
Essential / Necessary |
Security token used to validate legitimate requests and protect forms or account actions against cross-site request forgery attacks. |
Essential |
ory_hydra_login_csrf_1279109868 |
ory_hydra_login_csrf_1279109868 |
Essential / Necessary |
Security cookie used during OAuth/OIDC login flows to prevent cross-site request forgery (CSRF) attacks and securely validate authentication requests. |
Essential |
ucpf_consent |
UCPF Consent Cookie Universal Consent & Privacy Framework
|
Essential / Necessary |
Stores consent preferences and policy version. |
Essential |
ucpf_dns |
UCPF Consent Cookie Universal Consent & Privacy Framework
|
Essential / Necessary |
Stores Do Not Sell / Share or GPC-style opt-out choice. |
Essential |
wp_consent_* |
WP Consent API WordPress
|
Essential / Necessary |
Stores allow/deny for a WP Consent API category. |
Essential |
GCLB |
Google |
Preferences |
This cookie is used in context with load balancing - This optimizes the response rate between the visitor and the site, by distributing the traffic load on multiple network links or servers. |
Optional (consent) |
JSESSIONID |
J2EE |
Preferences |
JSESSIONID is a cookie generated by Servlet containers and used for session management in J2EE web applications for HTTP protocol. If a Web server is using a cookie for session management, it creates and sends JSESSIONID cookie to the client and then the client sends it back to the server in subsequent HTTP requests. JSESSIONID is a platform session cookie and is used by sites with JavaServer Pages (JSP). The cookie is used to maintain an anonymous user session by the server. |
Optional (consent) |
SEARCH_SAMESITE |
Google |
Preferences |
SameSite prevents the browser from sending this cookie along with cross-site requests. The main goal is mitigate the risk of cross-origin information leakage. It also provides some protection against cross-site request forgery attacks. |
Optional (consent) |
checkForPermission |
Cookie Consent IPONWEB / BidSwitch
|
Embeds & Widgets |
Consent |
Optional (consent) |
VISITOR_* |
Media embed extras Various
|
Embeds & Widgets |
Additional third-party media / podcast / document embeds. |
Optional (consent) |
YSC |
Media embed extras Various
|
Embeds & Widgets |
Additional third-party media / podcast / document embeds. |
Optional (consent) |
_ga |
Google Analytics 4 Google
|
Analytics |
Distinguishes users for analytics. |
Optional (consent) |
_ga_* |
Google Analytics 4 Google
|
Analytics |
Persists GA4 session state. |
Optional (consent) |
ab.storage.deviceId.44b1ec52-3914-42ae-8652-9e1ab513948c |
Braze |
Analytics |
Randomly-generated string used to identify anonymous users, and to differentiate users’ devices and enables device-based messaging. |
Optional (consent) |
ODID |
ODID |
Analytics |
Helps measure traffic and site performance. |
Optional (consent) |
onx_is_web_view |
onx_is_web_view |
Analytics |
Appears to record whether the site is being displayed inside an application's embedded web view. Provider/domain should be verified before final classification. |
Optional (consent) |
ph_phc_x5xNwmFsXaHSUgtZ07j1sfxNqFjKw5SoFvsrbmQ1rr9_posthog |
PostHog |
Analytics |
Stores PostHog visitor, device and session identifiers used for product analytics, usage measurement, session analysis, and potentially feature flags/session replay. |
Optional (consent) |
x_sid |
x_sid |
Analytics |
Helps measure traffic and site performance. |
Optional (consent) |
__Secure-ROLLOUT_TOKEN |
YouTube Embeds Google
|
Marketing |
Registers a unique ID for YouTube video view statistics / feature rollout. |
Optional (consent) |
__Secure-YEC |
YouTube Embeds Google
|
Marketing |
YouTube embed / experiment cookie set with embedded players. |
Optional (consent) |
__Secure-YNID |
YouTube Embeds Google
|
Marketing |
YouTube player preferences, secure login aids, and spam detection. |
Optional (consent) |
_axwrt |
AppLovin |
Marketing |
Stores a first-party visitor identifier used to recognize users for advertising measurement, attribution, and marketing optimization. |
Optional (consent) |
_axwrt_ts |
_axwrt_ts |
Marketing |
Stores timestamp/state information associated with the AppLovin/AddShoppers visitor identifier for advertising attribution and visitor tracking. |
Optional (consent) |
_fbp |
Ad / DSP extras Various
|
Marketing |
Additional advertising and demand-side platform hosts. |
Optional (consent) |
_gcl_* |
Ad / DSP extras Various
|
Marketing |
Additional advertising and demand-side platform hosts. |
Optional (consent) |
_tt_enable_cookie |
TikTok Pixel TikTok
|
Marketing |
Advertising and conversion tracking. |
Optional (consent) |
_ttp |
TikTok Pixel TikTok
|
Marketing |
Measures and improves ad performance. |
Optional (consent) |
A3 |
Yahoo Gemini |
Marketing |
Used by Yahoo for content and advertising personalisation. |
Optional (consent) |
ad-id |
Amazon |
Marketing |
Clickthroughs to Amazon websites: Noting how the user got to Amazon via this website |
Optional (consent) |
ad-privacy |
Amazon |
Marketing |
Provided by amazon-adsystem.com for tracking user actions on other websites to provide targeted content to the users. |
Optional (consent) |
audit |
Magnite (Rubicon) Magnite
|
Marketing |
Programmatic advertising / bidstream (formerly Rubicon Project). |
Optional (consent) |
audit_p |
Magnite |
Marketing |
Used to store the user's user intereset |
Optional (consent) |
ax_visitor |
ax_visitor |
Marketing |
Stores a visitor identifier/profile used to recognize returning visitors and support advertising attribution and marketing measurement. |
Optional (consent) |
axcrt |
AppLovin |
Marketing |
Identifies a visitor or advertising session for AppLovin marketing, attribution, analytics, and advertising optimization. |
Optional (consent) |
bito |
Beeswax |
Marketing |
This cookie is generally provided by bidr.io and is used for advertising purposes. |
Optional (consent) |
bitoIsSecure |
Beeswax |
Marketing |
This cookie is associated with bidr.io. It allows third party advertisers to target the visitor with relevant advertising. This pairing service is provided by third party advertisement hubs, which facilitate real-time bidding for advertisers. |
Optional (consent) |
c |
Rubicon Project / Magnite |
Marketing |
Synchronizes advertising identifiers and supports data exchange between ad-tech partners for targeted advertising and measurement. |
Optional (consent) |
CMID |
Casale Media |
Marketing |
Collects visitor data related to the user's visits to the website, such as the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads. |
Optional (consent) |
CMPRO |
ActiveCampaign |
Marketing |
Email marketing and site tracking from ActiveCampaign. |
Optional (consent) |
CMPS |
ActiveCampaign |
Marketing |
Email marketing and site tracking from ActiveCampaign. |
Optional (consent) |
IDE |
Google Ads Google
|
Marketing |
Advertising and conversion tracking. |
Optional (consent) |
khaos |
Magnite (Rubicon) Magnite
|
Marketing |
Magnite user identifier for advertising. |
Optional (consent) |
khaos_p |
Magnite |
Marketing |
Used to store the user's consent status for the current domain. |
Optional (consent) |
KRTBCOOKIE_* |
Pubmatic |
Marketing |
Registers a unique ID that identifies the user's device during return visits across websites that use the same ad network. The ID is used to allow targeted ads. |
Optional (consent) |
NID |
Google Ads Google
|
Marketing |
Advertising and conversion tracking. |
Optional (consent) |
PugT |
PubMatic |
Marketing |
It is used to track when the cookies were updated on the browser. It is used to limit the number of calls to server side cookie store |
Optional (consent) |
TDCPM |
The Tradedesk |
Marketing |
Registers a unique ID that identifies a returning user's device. The ID is used for targeted ads. |
Optional (consent) |
TDID |
The Tradedesk |
Marketing |
Registers a unique ID that identifies a returning user's device. The ID is used for targeted ads. |
Optional (consent) |
test_cookie |
Google |
Marketing |
This cookie is set by DoubleClick (which is owned by Google) to determine if the website visitor's browser supports cookies. |
Optional (consent) |
ttcsid |
TikTok |
Marketing |
The TikTok cookie ttcsid likely serves as a session identifier, helping to maintain user sessions and track interactions across the platform. Its purpose is probably to manage user authentication or personalize content based on activity, similar to other session-related cookies used by TikTok. |
Optional (consent) |
ttcsid_D0OA5HRC77UEFAFS9NMG |
TikTok |
Marketing |
The TikTok cookie ttcsid likely serves as a session identifier, helping to maintain user sessions and track interactions across the platform. Its purpose is probably to manage user authentication or personalize content based on activity, similar to other session-related cookies used by TikTok. |
Optional (consent) |
tuuid |
Platform161 |
Marketing |
Unique value to identify individual users. |
Optional (consent) |
tuuid_lu |
bidswitch.net |
Marketing |
Contains a unique visitor ID, which allows Bidswitch.com to track the visitor across multiple websites. This allows Bidswitch to optimize advertisement relevance and ensure that the visitor does not see the same ads multiple times. |
Optional (consent) |
uuid2 |
Xandr |
Marketing |
This cookie contains a unique randomly-generated value that enables the Platform to distinguish browsers and devices. |
Optional (consent) |
XANDR_PANID |
Xandr |
Marketing |
This cookie registers data on the visitor. The information is used to optimize advertisement relevance. |
Optional (consent) |
__Secure-STRP |
__Secure-STRP |
Security |
Protects Google service sessions and helps prevent fraudulent, abusive, or unauthorized requests. |
Essential |
Browser storage keys
| Type |
Key |
| localstorage |
uw-icon-locales |
| localstorage |
elementor |
| localstorage |
uw-uid |
| localstorage |
uw-tunings-checksum |
| localstorage |
uw-tunings |
| sessionstorage |
elementor |
| localstorage |
ucpf_consent_backup |
| sessionstorage |
ucpf_consent_backup |
| sessionstorage |
ucpf_consent_bridge |
| localstorage |
lastExternalReferrerTime |
| localstorage |
lastExternalReferrer |
| localstorage |
_gcl_ls |
| sessionstorage |
tt_sessionId |
| sessionstorage |
tt_pixel_session_index |
| sessionstorage |
tt_appInfo |
Scripts, pixels, beacons, and embeds
Tracking can occur without cookies. These technologies were observed during scanning.
| Name or host |
Category |
Type |
Consent |
Ad / DSP extras pixel.rubiconproject.com
|
Marketing |
pixels |
Optional (consent) |
AppNexus / Xandr ib.adnxs.com
|
Marketing |
requests |
Optional (consent) |
|
ara.paa-reporting-advertising.amazon |
unclassified |
requests |
Optional (consent) |
|
auth.split.io |
unclassified |
requests |
Optional (consent) |
|
b.applovin.com |
unclassified |
requests |
Optional (consent) |
Beeswax (bidr.io) cnv.event.prod.bidr.io
|
Marketing |
requests |
Optional (consent) |
BidSwitch x.bidswitch.net
|
Marketing |
requests |
Optional (consent) |
|
book-cdn.peek.com |
unclassified |
scripts |
Optional (consent) |
|
book.peek.com |
unclassified |
iframes |
Optional (consent) |
|
c.albss.com |
unclassified |
scripts |
Optional (consent) |
|
c.amazon-adsystem.com |
unclassified |
scripts |
Optional (consent) |
Casale Media (Index Exchange) dsum-sec.casalemedia.com
|
Marketing |
requests |
Optional (consent) |
|
cdn.datatables.net |
unclassified |
scripts |
Optional (consent) |
Cloudflare Turnstile mountainridgeatvtrails.com
|
Security |
scripts |
Optional (consent) |
Cloudflare Web Analytics static.cloudflareinsights.com
|
Analytics |
scripts |
Optional (consent) |
|
consent.cookiebot.com |
unclassified |
scripts |
Optional (consent) |
|
consentcdn.cookiebot.com |
unclassified |
requests |
Optional (consent) |
Custom Facebook Feed (Smash Balloon) mountainridgeatvtrails.com
|
Marketing |
scripts |
Optional (consent) |
Font Awesome mountainridgeatvtrails.com
|
Embeds & Widgets |
scripts |
Optional (consent) |
Gmail SMTP jnn-pa.googleapis.com
|
Essential / Necessary |
requests |
Essential or unclassified |
Google Advertising googleads.g.doubleclick.net
|
Marketing |
scripts |
Optional (consent) |
Google Analytics www.google-analytics.com
|
Analytics |
beacons |
Optional (consent) |
Google Fonts fonts.googleapis.com
|
Essential / Necessary |
requests |
Essential or unclassified |
Google Maps mountainridgeatvtrails.com
|
Embeds & Widgets |
scripts |
Optional (consent) |
Google Pay google.com
|
Essential / Necessary |
requests |
Essential or unclassified |
Google Site Kit mountainridgeatvtrails.com
|
Analytics |
scripts |
Optional (consent) |
Google Tag Manager www.googletagmanager.com
|
Analytics |
scripts |
Optional (consent) |
Gravity Forms mountainridgeatvtrails.com
|
Essential / Necessary |
scripts |
Essential or unclassified |
Gravity Forms Cloudflare Turnstile cdnjs.cloudflare.com
|
Security |
scripts |
Optional (consent) |
Gravity Forms reCAPTCHA www.google.com
|
Security |
scripts |
Optional (consent) |
|
gstatic.com |
unclassified |
requests |
Optional (consent) |
|
js.peek.com |
unclassified |
scripts |
Optional (consent) |
|
lh3.googleusercontent.com |
unclassified |
requests |
Optional (consent) |
Mapbox api.mapbox.com
|
Embeds & Widgets |
scripts |
Optional (consent) |
Maps maps.gstatic.com
|
Embeds & Widgets |
scripts |
Optional (consent) |
Meta Pixel connect.facebook.net
|
Marketing |
scripts |
Optional (consent) |
New Relic Browser js-agent.newrelic.com
|
Analytics |
scripts |
Optional (consent) |
|
pathfinder.peeklabs.com |
unclassified |
requests |
Optional (consent) |
PubMatic simage2.pubmatic.com
|
Marketing |
requests |
Optional (consent) |
|
re.applovin.com |
unclassified |
requests |
Optional (consent) |
reCAPTCHA www.google.com
|
Security |
scripts |
Optional (consent) |
|
res4.applovin.com |
unclassified |
scripts |
Optional (consent) |
|
s.amazon-adsystem.com |
unclassified |
requests |
Optional (consent) |
|
s.axon.ai |
unclassified |
requests |
Optional (consent) |
|
sdk.iad-06.braze.com |
unclassified |
requests |
Optional (consent) |
|
sdk.split.io |
unclassified |
requests |
Optional (consent) |
Segment segment.prod.bidr.io
|
Analytics |
requests |
Optional (consent) |
Sentry Browser o240024.ingest.us.sentry.io
|
Analytics |
requests |
Optional (consent) |
Suspected tracking pixel s.axon.ai
|
Marketing |
scripts |
Optional (consent) |
The Trade Desk insight.adsrvr.org
|
Marketing |
pixels |
Optional (consent) |
TikTok Feeds Pro analytics.tiktok.com
|
Marketing |
scripts |
Optional (consent) |
TikTok Hosts analytics-ipv6.tiktokw.us
|
Marketing |
requests |
Optional (consent) |
unpkg CDN unpkg.com
|
Preferences |
scripts |
Optional (consent) |
UserWay cdn.userway.org
|
Essential / Necessary |
scripts |
Essential or unclassified |
WP Consent API mountainridgeatvtrails.com
|
Essential / Necessary |
scripts |
Essential or unclassified |
Yahoo Advertising sp.analytics.yahoo.com
|
Marketing |
requests |
Optional (consent) |
YouTube www.youtube.com
|
Marketing |
scripts |
Optional (consent) |
YouTube Embeds yt3.ggpht.com
|
Marketing |
requests |
Optional (consent) |
WordPress plugins that may process data
Active plugins mapped in our local catalog, including forms, builders, analytics, security, and commerce tools. Unmapped plugins may still process data. Review your install inventory with counsel.
| Plugin or service |
Provider |
Category |
What it may do |
Provider privacy info |
| Defender Security |
WPMU DEV |
security |
Security plugin cookies related to login protection and firewall when present. |
Privacy policy
|
| Elementor |
Elementor Ltd. |
necessary |
Page builder assets used to render site layouts. |
Privacy policy
|
| Facebook Feed (Smash Balloon / Custom) |
Smash Balloon / Smash |
marketing |
Facebook social feed embeds and related third-party requests. |
Privacy policy
|
| Google Analytics 4 |
Google |
analytics |
Analytics service used to measure website traffic and behavior. |
Privacy policy
|
| Google Maps |
Google |
functional |
Embedded Google Maps / Places. |
Privacy policy
|
| Google reCAPTCHA |
Google |
security |
Bot protection and spam prevention. |
Privacy policy
|
| Gravity Forms |
Rocketgenius |
necessary |
Essential form functionality (validation, multi-page forms). Third-party add-ons like reCAPTCHA are separate services. |
Privacy policy
|
| SmartCrawl Pro |
|
functional |
Active WordPress plugin that may process visitor data. |
Not linked |
| Transactional email (SMTP / API) |
Site mail delivery |
necessary |
Server-side delivery of transactional messages (order confirmations, password resets, form notifications) via an SMTP plugin or ESP API. Not a visitor-facing tracker; disclosure/inventory only. |
Not linked |
| UCPF Consent Cookie |
Universal Consent & Privacy Framework |
necessary |
Stores your cookie consent choices so the site can respect them. |
Not linked |
| UserWay Accessibility |
UserWay |
necessary |
Accessibility widget (ADA / WCAG assistive toolbar). Required for site accessibility — never gated behind consent. |
Privacy policy
|
| WP Consent API |
WordPress |
preferences |
Category consent cookies written by the WP Consent API (or UCPF shim) so plugins can read allow/deny per category. |
Privacy policy
|
Where data may go
Depending on the tools enabled and your consent choices, information may be processed by the providers below or their subprocessors. Each provider applies its own privacy terms.
| Destination |
Host or pattern |
Category |
Purpose |
More info |
| Ad / DSP extras |
pixel.rubiconproject.com |
marketing |
Observed during a privacy scan of this website. |
Not linked |
| Ad / DSP extras Various |
adservice.google.com |
marketing |
Additional advertising and demand-side platform hosts. |
Not linked |
| AppNexus / Xandr |
ib.adnxs.com |
marketing |
Observed during a privacy scan of this website. |
Not linked |
| AppNexus / Xandr Microsoft Xandr |
adnxs.com |
marketing |
AppNexus / Xandr ad serving and CDN (adnxs.com). |
Provider policy
|
| ara.paa-reporting-advertising.amazon |
ara.paa-reporting-advertising.amazon |
unclassified |
Observed during a privacy scan of this website. |
Not linked |
| auth.split.io |
auth.split.io |
unclassified |
Observed during a privacy scan of this website. |
Not linked |
| b.applovin.com |
b.applovin.com |
unclassified |
Observed during a privacy scan of this website. |
Not linked |
| Beeswax (bidr.io) |
cnv.event.prod.bidr.io |
marketing |
Observed during a privacy scan of this website. |
Not linked |
| Beeswax (bidr.io) Beeswax |
bidr.io |
marketing |
Beeswax programmatic advertising and real-time bidding (bidr.io). |
Provider policy
|
| BidSwitch |
x.bidswitch.net |
marketing |
Observed during a privacy scan of this website. |
Not linked |
| BidSwitch IPONWEB / BidSwitch |
bidswitch.net |
marketing |
BidSwitch cookie sync and advertising identity (bidswitch.net). |
Provider policy
|
| book-cdn.peek.com |
book-cdn.peek.com |
unclassified |
Observed during a privacy scan of this website. |
Not linked |
| book.peek.com |
book.peek.com |
unclassified |
Observed during a privacy scan of this website. |
Not linked |
| c.albss.com |
c.albss.com |
unclassified |
Observed during a privacy scan of this website. |
Not linked |
| c.amazon-adsystem.com |
c.amazon-adsystem.com |
unclassified |
Observed during a privacy scan of this website. |
Not linked |
| Casale Media (Index Exchange) |
dsum-sec.casalemedia.com |
marketing |
Observed during a privacy scan of this website. |
Not linked |
| Casale Media (Index Exchange) Casale Media |
casalemedia.com |
marketing |
Casale Media / Index Exchange advertising cookies. |
Provider policy
|
| cdn.datatables.net |
cdn.datatables.net |
unclassified |
Observed during a privacy scan of this website. |
Not linked |
| Cloudflare |
cdn-cgi/challenge-platform |
necessary |
Security and performance cookies set by Cloudflare when the site uses Cloudflare (bot management / clearance). Web Analytics is a separate service. |
Provider policy
|
| Cloudflare Email Cloudflare |
|
necessary |
Transactional email via Cloudflare Email Service (distinct from Cloudflare CDN/proxy). Server-side only; not a visitor tracker. |
Provider policy
|
| Cloudflare Turnstile |
mountainridgeatvtrails.com |
security |
Observed during a privacy scan of this website. |
Not linked |
| Cloudflare Turnstile Cloudflare |
challenges.cloudflare.com |
security |
Bot protection widget. |
Provider policy
|
| Cloudflare Web Analytics |
static.cloudflareinsights.com |
analytics |
Observed during a privacy scan of this website. |
Not linked |
| Cloudflare Web Analytics Cloudflare |
static.cloudflareinsights.com |
analytics |
Optional Cloudflare Web Analytics beacon (static.cloudflareinsights.com). |
Provider policy
|
| consent.cookiebot.com |
consent.cookiebot.com |
unclassified |
Observed during a privacy scan of this website. |
Not linked |
| consentcdn.cookiebot.com |
consentcdn.cookiebot.com |
unclassified |
Observed during a privacy scan of this website. |
Not linked |
| ConvertKit (Kit) Kit |
convertkit.com |
marketing |
ConvertKit / Kit forms and tracking scripts. |
Provider policy
|
| Custom Facebook Feed (Smash Balloon) |
mountainridgeatvtrails.com |
marketing |
Observed during a privacy scan of this website. |
Not linked |
| Defender Security WPMU DEV |
|
security |
Security plugin cookies related to login protection and firewall when present. |
Provider policy
|
| Elementor Elementor Ltd. |
|
necessary |
Page builder assets used to render site layouts. |
Provider policy
|
| Elementor Elementor Ltd. |
elementor/assets |
necessary |
Page builder assets used to render site layouts. |
Provider policy
|
| Facebook Feed (Smash Balloon / Custom) Smash Balloon / Smash |
|
marketing |
Facebook social feed embeds and related third-party requests. |
Provider policy
|
| Facebook Feed (Smash Balloon / Custom) Smash Balloon / Smash |
facebook.com/plugins |
marketing |
Facebook social feed embeds and related third-party requests. |
Provider policy
|
| Facebook Messenger Customer Chat Meta |
connect.facebook.net |
marketing |
Facebook / Meta customer chat plugin. |
Provider policy
|
| Font Awesome |
mountainridgeatvtrails.com |
functional |
Observed during a privacy scan of this website. |
Not linked |
| Font Awesome Fonticons |
kit.fontawesome.com |
necessary |
Loads Font Awesome kits or CDN icon fonts. Always allowed — layout icon fonts are not gated behind Embeds. |
Provider policy
|
| Gmail SMTP |
jnn-pa.googleapis.com |
necessary |
Observed during a privacy scan of this website. |
Not linked |
| Google Ads Google |
googleadservices.com |
marketing |
Advertising and conversion tracking. |
Provider policy
|
| Google Advertising |
googleads.g.doubleclick.net |
marketing |
Observed during a privacy scan of this website. |
Not linked |
| Google Analytics |
www.google-analytics.com |
analytics |
Observed during a privacy scan of this website. |
Not linked |
| Google Analytics 4 Google |
|
analytics |
Analytics service used to measure website traffic and behavior. |
Provider policy
|
| Google Analytics 4 Google |
googletagmanager.com/gtag |
analytics |
Analytics service used to measure website traffic and behavior. |
Provider policy
|
| Google Docs / Drive embeds Google |
docs.google.com |
functional |
Google Docs, Sheets, Slides, and Drive preview embeds. |
Provider policy
|
| Google Fonts |
fonts.googleapis.com |
necessary |
Observed during a privacy scan of this website. |
Not linked |
| Google Fonts Google |
fonts.googleapis.com |
necessary |
Loads web fonts from Google Fonts CDN. Always allowed — layout fonts are not gated behind Embeds. |
Provider policy
|
| Google Maps |
mountainridgeatvtrails.com |
functional |
Observed during a privacy scan of this website. |
Not linked |
| Google Maps Google |
maps.googleapis.com |
functional |
Embedded Google Maps / Places. |
Provider policy
|
| Google Pay |
google.com |
necessary |
Observed during a privacy scan of this website. |
Not linked |
| Google reCAPTCHA Google |
google.com/recaptcha |
security |
Bot protection and spam prevention. |
Provider policy
|
| Google Site Kit |
mountainridgeatvtrails.com |
analytics |
Observed during a privacy scan of this website. |
Not linked |
| Google Tag Manager |
www.googletagmanager.com |
analytics |
Observed during a privacy scan of this website. |
Not linked |
| Google Tag Manager Google |
googletagmanager.com/gtm.js |
analytics |
Tag management system for marketing and analytics tags. |
Provider policy
|
| Gravity Forms |
mountainridgeatvtrails.com |
necessary |
Observed during a privacy scan of this website. |
Not linked |
| Gravity Forms Rocketgenius |
|
necessary |
Essential form functionality (validation, multi-page forms). Third-party add-ons like reCAPTCHA are separate services. |
Provider policy
|
| Gravity Forms Cloudflare Turnstile |
cdnjs.cloudflare.com |
security |
Observed during a privacy scan of this website. |
Not linked |
| Gravity Forms reCAPTCHA |
www.google.com |
security |
Observed during a privacy scan of this website. |
Not linked |
| gstatic.com |
gstatic.com |
unclassified |
Observed during a privacy scan of this website. |
Not linked |
| Instagram Feed Smash Balloon |
instagram.com |
marketing |
Instagram feed embeds. |
Provider policy
|
| js.peek.com |
js.peek.com |
unclassified |
Observed during a privacy scan of this website. |
Not linked |
| lh3.googleusercontent.com |
lh3.googleusercontent.com |
unclassified |
Observed during a privacy scan of this website. |
Not linked |
| Magnite (Rubicon) Magnite |
rubiconproject.com |
marketing |
Programmatic advertising / bidstream (formerly Rubicon Project). |
Provider policy
|
| Mapbox |
api.mapbox.com |
functional |
Observed during a privacy scan of this website. |
Not linked |
| Maps |
maps.gstatic.com |
functional |
Observed during a privacy scan of this website. |
Not linked |
| Meta Pixel |
connect.facebook.net |
marketing |
Observed during a privacy scan of this website. |
Not linked |
| New Relic Browser |
js-agent.newrelic.com |
analytics |
Observed during a privacy scan of this website. |
Not linked |
| pathfinder.peeklabs.com |
pathfinder.peeklabs.com |
unclassified |
Observed during a privacy scan of this website. |
Not linked |
| PubMatic |
simage2.pubmatic.com |
marketing |
Observed during a privacy scan of this website. |
Not linked |
| PubMatic |
pubmatic.com |
marketing |
PubMatic programmatic advertising and cookie matching. |
Provider policy
|
| re.applovin.com |
re.applovin.com |
unclassified |
Observed during a privacy scan of this website. |
Not linked |
| reCAPTCHA |
www.google.com |
security |
Observed during a privacy scan of this website. |
Not linked |
| res4.applovin.com |
res4.applovin.com |
unclassified |
Observed during a privacy scan of this website. |
Not linked |
| s.amazon-adsystem.com |
s.amazon-adsystem.com |
unclassified |
Observed during a privacy scan of this website. |
Not linked |
| s.axon.ai |
s.axon.ai |
unclassified |
Observed during a privacy scan of this website. |
Not linked |
| sdk.iad-06.braze.com |
sdk.iad-06.braze.com |
unclassified |
Observed during a privacy scan of this website. |
Not linked |
| sdk.split.io |
sdk.split.io |
unclassified |
Observed during a privacy scan of this website. |
Not linked |
| Segment |
segment.prod.bidr.io |
analytics |
Observed during a privacy scan of this website. |
Not linked |
| Segment |
cdn.segment.com |
analytics |
Fleet fingerprint stub — expand patterns as evidence is collected. Not a compliance guarantee. |
Not linked |
| Sentry Browser |
o240024.ingest.us.sentry.io |
analytics |
Observed during a privacy scan of this website. |
Not linked |
| Sentry Browser |
browser.sentry-cdn.com |
analytics |
Fleet fingerprint stub — expand patterns as evidence is collected. Not a compliance guarantee. |
Not linked |
| SmartCrawl Pro |
|
functional |
Active WordPress plugin that may process visitor data. |
Not linked |
Google Analytics
This website may use Google Analytics to understand how visitors find and use the site. That can include pages viewed, device and browser details, approximate location, referrers, and events. Google may use cookies or similar technologies. We do not intentionally send names, email addresses, phone numbers, or payment card numbers to Google Analytics. Where required by law, Analytics loads only after appropriate consent.
Google Tag Manager
Google Tag Manager may be used to manage tags and integrations for analytics, ads, and consent signals. Data collected depends on the tags configured. Where required, tags that load analytics or advertising should respect consent choices before firing.
Cloudflare
Cloudflare may process technical information such as IP addresses, request headers, URLs, security events, bot scores, and traffic logs. This helps deliver, cache, and protect the site. Some Cloudflare security cookies may be treated as strictly necessary for availability and abuse prevention.
Meta and Facebook technologies
Meta Pixel or related tools may measure conversions, build audiences, or support advertising. These tools typically require marketing consent where GDPR-style rules apply. You may also have opt-out rights under US state privacy laws for sale or sharing.
Forms and user submissions
If you submit a form, request information, book an appointment, place an order, or contact us, we may use that information to respond, fulfill the request, prevent spam, and keep records. Form data may be processed by form plugins, email or SMTP providers, CRM tools, spam protection, and hosting providers.
Payments, shipping, and email
If this site offers purchases, donations, subscriptions, or bookings, payment details are typically handled by third-party payment processors. We do not intentionally store full card numbers unless a clearly disclosed compliant system requires it. Shipping or fulfillment data may be shared with carriers and logistics tools. Marketing emails are sent only where allowed. You can unsubscribe from marketing and still receive transactional messages.
How information is shared
We may share information with service providers such as hosting, CDN, analytics, advertising, payments, email, CRM, security, and developers as needed to operate the site, or when required by law. We do not sell personal information for money in the everyday sense. Some privacy laws define “sale” or “sharing” broadly to include certain advertising or cross-context behavioral advertising. See California rights below.
International transfers
Information may be processed or stored outside your state, province, or country, including by US-based providers. Where required, transfers may rely on adequacy decisions, standard contractual clauses, or other lawful mechanisms. Review each provider’s documentation for details.
Data retention
We retain information only as long as reasonably necessary for the purposes described here, unless a longer period is required or allowed by law. Configured operational retention for certain privacy records on this site is approximately 365 days. Other systems such as orders, security logs, and analytics may use different periods.
Security
We use reasonable technical and organizational measures such as TLS, access controls, firewalls, malware scanning, and monitoring. No method of transmission or storage is completely secure.
Account login activity
For security, login attempts and related account-security events (such as password policy checks) may be logged. This helps protect accounts against unauthorized access.
Password-policy and login-security tools (for example plugins that enforce password rotation or record sign-in history) may retain those events separately from cookie consent logs. Staff and customers with accounts should expect this monitoring as part of protecting the site.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing. You may also withdraw consent, request portability, opt out of certain advertising or sale or sharing, limit use of sensitive personal information, and lodge a complaint with a supervisory authority.
Submit a privacy or data rights request
California privacy rights (CCPA / CPRA). Do Not Sell or Share
California residents may have the right to know what personal information is collected, used, disclosed, sold, or shared. They may also request deletion or correction, opt out of sale or sharing, limit use of sensitive personal information, and be free from discrimination for exercising these rights.
Categories commonly involved on websites like this include identifiers such as name and email, commercial information such as orders, internet activity such as browsing and interactions, and approximate geolocation. Purposes include providing services, security, analytics, and marketing where allowed.
Do Not Sell or Share.
To opt out of sale or sharing of personal information as defined under California law and similar US state laws, use the link below when available, or email us. Cookie Settings alone may not cover every advertising or sharing activity covered by those laws.
Do Not Sell or Share My Personal Information
Other US state privacy laws
Residents of states such as Colorado, Connecticut, Virginia, Utah, and others may have similar rights to access, delete, correct, or opt out of targeted advertising, sale, or profiling. Use the contact methods or rights forms on this site to submit a request. We may need to verify your identity.
European, UK, Swiss, and similar rights
Where GDPR or UK GDPR applies, you may have the rights listed above, including withdrawing consent for optional tracking. You may also contact your local data protection authority.
Brazil, Canada, and other regions
Other regions grant access, correction, deletion, and consent-related rights. This website’s jurisdiction packs and consent banner help support those workflows technically. Local counsel should confirm legal requirements for your organization.
Sensitive information and children
Do not submit sensitive personal information through this website unless specifically requested and necessary. This website is not directed to children under the age required by applicable law. We do not knowingly collect personal information from children without appropriate parental consent.
Automated processing and breaches
We may use automated tools for analytics, spam and fraud detection, security, and performance. We do not intentionally use automated decision-making that produces legal or similarly significant effects without appropriate safeguards. If a personal data breach occurs, we will investigate and notify individuals or authorities where required by law.
Embedded content and links
Embedded videos, maps, social posts, or other third-party content may collect data as if you visited those sites directly. Review third-party privacy policies before interacting with embeds or external links.
Changes
We may update this Privacy Policy when tools, laws, or business practices change. The updated version will be posted on this page with a revised date.
Contact
Mountain Ridge ATV Park
Email: info@mountainridgeatvtrails.com
517 Boone Rd, Central City, PA 15926
Cookie Policy
Generated by Universal Consent and Privacy Framework as a technical aid. Not a compliance certification.