Policy
Privacy Policy
What this website collects when you visit, who else sees it, and what never leaves your device. Written from an audit of the site’s actual code, not from a template.
Written with AI (Claude) for Scarlet Beast, from a line-by-line review of the scripts, forms and embeds on scarletbeast.com. Our AI policy.
We have no accounts to sign up for on this site, no ads and no ad networks, and we do not sell your information. We use Google Analytics to count visits, and it stays off if your browser sends Global Privacy Control or you switch it off below. Our contact forms don’t send anything to us; they open your own email. The AI chat and the homepage terminal do send what you type to our servers, so keep private details out of them. The Get help now pages, the search page and nearly all of the free tools run no analytics at all, and what you type into the tools stays on your device.
1. At a glance
| What | Where it goes | When |
|---|---|---|
| Pages you view, referrer, device, browser, approximate location | Google Analytics | Most pages, on load, unless your browser sends Global Privacy Control or you switched analytics off (never on the Get help now pages, the search page or the free tools named in section 2) |
| IP address and basic request details | Cloudflare, our host | Every page, like any website |
| IP address, as a side effect of loading a resource | Google Fonts, CoinGecko, and our own servers | Pages that show the market ticker, the ledger bar or web fonts |
| Whatever you choose to write to us | Your email provider, then our inbox | Only when you press send in your own email app |
| Messages you type to the AI chat | Our chat server, swiftsnake.scarletbeast.com | Only if you open the Scarlet Woman chat and send a message |
| Commands, attachments and an optional email | Our server, living.scarletbeast.com | Only if you use the homepage’s Living terminal |
| What you write in the free tools, photos you add to them, and Lab entries | Your browser’s storage, on your device only | While you use those tools; erasable |
2. Analytics
Most pages load Google Analytics 4 (property G-2Q4K1LE6T3). It sets first-party cookies (named _ga and _ga_…) and tells Google which pages were viewed, the page you came from, your browser and device type, screen size, and an approximate location that Google derives from your IP address. Google may also record interactions it measures automatically, such as scrolling or clicking a link to another site. The same measurement is shared with our sister site heav3n.org, so a visit that moves between the two counts as one.
We use it to see which pages people read and which ones fail them. We don’t send Google your name, your email, or anything you type into a form. Google handles what it receives under the Google Privacy Policy; how Google uses data from sites that use its services explains more.
Many older pages from the site’s WordPress days also load a Google Tag Manager container (GTM-525JRTWR). When we checked it on September 29, 2026 it contained no tags, so it measures nothing by itself, but fetching it from Google still lets Google see your IP address and browser. It follows the same choice as Google Analytics below.
When it stays off: if your browser sends the Global Privacy Control signal, or you turn analytics off with the switch in section 10, our pages don’t load Google Analytics or the Tag Manager container at all. The check runs in your browser before anything is fetched from Google, so no request goes to Google Analytics and no _ga cookie is set.
Pages with no analytics at all: the Get help now pages, the search page, the free tools page and every tool listed on it, in English and Spanish, do not load Google Analytics or any other analytics for anyone. That includes the Psychiatric Advance Directive builder, the safety plan, the first-aid pages and the guides. The one exception on the tools list is the KONG New York homeless resources guide, an older page that follows the same analytics choice as the rest of the site. When we counted on October 3, 2026, 176 pages loaded no analytics.
3. Hosting
The site is a set of static pages served by Cloudflare. Like every web host, Cloudflare receives your IP address, browser details and the address of the page you ask for, and uses them to deliver the page and to protect the site from attacks. Email addresses on our pages are protected from spam bots by Cloudflare’s email obfuscation, which is why some links pass through /cdn-cgi/. Cloudflare’s handling is covered by the Cloudflare Privacy Policy.
4. Other services your browser contacts
Some features load things from other servers. When your browser fetches them, that server can see your IP address and browser, even though we send it nothing about you.
- Google Fonts (
fonts.googleapis.com,fonts.gstatic.com) supplies the typefaces on many older pages. - CoinGecko (
api.coingecko.com) supplies the public prices in the MARKETS ticker at the top of the page. - Our own servers: the ledger bar reads a public summary from
accounting.scarletbeast.com(without cookies), and audio files stream fromcdn.scarletbeast.com. - Scarlet Beast sign-in check. Many pages load a small script from
poker.scarletbeast.comthat asks whether you’re already signed in to a Scarlet Beast app, so it can show your name or a “Sign in” button. If you have signed in to one of our apps, your browser sends that app’s session cookie with the check. If you never have, there is no session to send. - Embedded media. Some pages embed videos or music from YouTube, Spotify or SoundCloud. Those players are run by those companies and follow their own privacy policies, which may include cookies. Where we could, we use YouTube’s privacy-enhanced mode (
youtube-nocookie.com).
5. Forms and email
The contact form, the “Enlist” newsletter box, the Join pledge and the consulting form do not send anything to our servers. When you press the button, they open a pre-filled message in Gmail or in your own email app, addressed to [email protected] (or, for consulting, [email protected]). Nothing reaches us unless you press send there, and we receive only what that email contains.
When you email us, your message stays in our mailbox. We use it to reply to you and, if you asked to join the mailing list, to write to you when there is news. We don’t sell or rent email addresses, and we don’t add anyone to a list who didn’t ask. Ask us to delete your messages or take you off the list and we will.
Older pages from the site’s WordPress days used to show a comment form that no longer worked. It has been replaced with a note that comments are closed and an email address to write to instead.
6. What stays on your device
Some pages use your browser’s own storage (localStorage or sessionStorage), which never leaves your device on its own:
- small interface settings, such as whether you’ve seen the homepage intro or dismissed a pop-up, and your analytics choice if you used the switch below;
- what you write in the free tools, such as your answers in the PAD builder, your safety plan, your mood diary and your medicine list;
- photos you add to the hope box or My day, which the browser keeps in its own database (
IndexedDB) on your device; - copies of pages you chose to save for use without a signal on Take the help with you;
- your entries in Lab tools such as the Experience Ledger. The Ledger can share an anonymous copy of your ratings for public research totals, but only after you tick its consent box, and it explains what is shared before you do.
The search page runs in your browser against a list of this site’s pages that it downloads when it opens. What you type there is not sent to us or to anyone else and is not saved. Your words are put after the # in the address bar so a search can be linked or reloaded; browsers do not send that part to a server, but it stays in this browser’s history like any address.
My data on this device shows everything the tools have saved in your browser, and lets you download it as a backup file, move it to another device, or erase it. That page reads your browser’s storage on your device and sends none of it to us.
Clearing your browser’s site data for scarletbeast.com erases all of it.
7. The Psychiatric Advance Directive builder
The PAD builder asks about medications, hospitals and people you trust. That is health information, so it gets the strictest treatment on the site:
- Your answers autosave to your browser on your device. They are never sent to Scarlet Beast or anyone else.
- The page loads no analytics and no tracking scripts.
- The Erase button deletes your answers from the device. The download button saves a copy only to your computer.
- On a shared or public computer, erase your answers when you’re done, or use a private window.
Like any page, the builder is delivered by Cloudflare (so it sees the request, never your answers), and the site header on it loads the public market ticker and ledger bar described above.
8. The AI chat and the Living terminal
Scarlet Woman AI chat. Many pages offer a panel that opens the Scarlet Woman chat, an AI character that says it is an AI. It runs as a separate app (scarletwoman-ai-chat.pages.dev). What you type there, along with the conversation so far, is sent to our chat server at swiftsnake.scarletbeast.com so an AI model can write the reply. Please don’t share private details such as your full name, address or health information in the chat. It is not a counsellor and cannot help in an emergency.
Living terminal. The homepage has a terminal where anyone can send a request to the site’s operator. If you use it, the command you type and any file you attach are sent to our server at living.scarletbeast.com and kept there so the operator can review them. A short summary of a request may appear publicly in the site’s live Transmissions feed, so don’t put personal or private information in a command. If you give an email address so you can hear the outcome, we use it only for that.
9. Donations
Donations go through Cash App or Venmo, on their own sites and apps. We never see your card or bank details. We receive what those services show any recipient, such as the name on your account and your note, and we use it only to keep our books and say thank you.
10. Your choices
- Turn analytics off here. The switch below turns Google Analytics (and the Tag Manager container) off for this site in this browser. It’s saved in your browser’s storage, so it lasts until you clear site data or switch it back on. Turning it off also deletes the site’s
_gacookies from this browser. The site works fully either way. - Global Privacy Control. If your browser or an extension sends GPC, we treat it as a no and don’t load Google Analytics. You don’t need to do anything else. We don’t separately act on the older “Do Not Track” setting.
- Other ways to block it: Google’s browser add-on, a content blocker, or your browser’s tracking protection.
- Block or clear cookies and site data in your browser settings.
- Ask us what we hold about you (normally only emails you sent us), or ask us to delete it. We don’t hold your analytics data ourselves in a form tied to your name. Google holds it, and the add-on above stops the collection.
Google Analytics in this browser
This switch needs JavaScript. With JavaScript off, Google Analytics can’t load either.
11. Children
This site is not directed at children under 13, and we don’t knowingly collect information from them. If you believe a child has sent us personal information, write to us and we’ll delete it.
12. Our other sites and apps
This policy covers scarletbeast.com. Our apps on other addresses (for example sign-in, poker, or the Living service), and heav3n.org, may collect more to work at all, such as an account. They are covered by what they tell you at the point of use. Links to sites we don’t run are governed by those sites.
13. Changes
When what the site collects changes, this page changes with it. We update the version and date at the top. If a change means we collect something new about you, we’ll say so plainly here before or when it starts.
14. Contact
Questions, requests or corrections: [email protected]. If something on this page doesn’t match what the site actually does, tell us. We treat that as a bug and fix it.