Privacy Policy
Duck is a score game. This policy describes exactly what it collects, why, who else sees it, and how to get rid of it. It is short because the app does little.
What Duck collects
| Data | Why | Optional? |
|---|---|---|
| Your account identifier (from Sign in with Apple, Google, or an email link) | To know that a score is yours and to let you keep it on a new phone. | No, if you want a ranked score. Guest play needs no account. |
| Nickname | Shown next to your score on the leaderboard. | Only needed to appear on a leaderboard. |
| Social handle (Instagram or TikTok) | Shown next to your score if you enter one. | Yes. Leave it blank and nothing is shown. |
| Your scores, and the recorded inputs of your best run | To rank you, and to verify the score is real by re-simulating the run on our server. The recording is what makes replay possible. | No, for ranked play. |
| Country, derived from the network your request arrives on | Country leaderboards. We never ask for it and never store a precise location. | It is derived, not collected from your device. |
| Messages you send: to a friend, or in a duel room | To deliver them to the people you sent them to. Messages between two players require both to have accepted each other as friends; duel-room messages are visible to the players in that duel. Nothing is read by anyone else, and nothing is used for any other purpose. | Yes. Not sending a message collects nothing. |
| Reports you file about another player | So we can review the report and act on it. A report records who filed it, who it is about, the reason chosen from a fixed list, and the nickname at that moment. | Yes. |
| Rewarded ads, only if you choose to watch one | The "watch an ad, get a life" option on the lives screen is served by Google AdMob. When you finish an ad, Google tells our server your account identifier so the life goes to your account. Google's ad SDK collects device and usage data (including, on Android, the advertising ID) to serve and measure the ad; in the EEA, the UK and other regions that require it, you are asked first, and you can change your answer in Settings. | Yes. Nothing about ads is collected unless you open the lives screen, and no ad plays unless you tap it. |
| Banner ads | Duck shows banner ads on the menus and under the result of a run, never during a run, and not to players with unlimited play. In the iPhone and Android apps they are served by Google AdMob; in a web browser, by Google AdSense (which may also show one beside the game on a wide screen). Google collects device and usage data, and on the web uses cookies, to serve and measure these ads; in the EEA, the UK and other regions that require it, you are asked for consent first and can change your answer in Settings. | Yes. You can decline personalised ads in Google's consent message, at adssettings.google.com, or by blocking third-party cookies. |
| Purchase events from Apple or Google Play, via RevenueCat | To give you what you paid for and to restore it on a new device. | Only if you buy something. |
What Duck does not collect
- No ads during a run, ever. Banners appear only on menus and after a run, and full-screen ads only when you choose to watch one for a life. Duck does not ask iOS for permission to track you, so no advertising identifier is read on iPhone.
- No precise or approximate device location.
- No contacts, photos, microphone, camera, or health data.
- No third-party analytics SDKs. Apart from Google AdMob in the apps and Google AdSense on the website, described above, nothing in Duck tracks you across other apps or sites.
- No artificial-intelligence provider. Nothing you type is sent to a model.
- No public posts, feeds, or profiles beyond a nickname, an optional social handle and your scores. Messages exist only between players who accepted each other, or inside a duel both players joined.
Who processes it
- Google Firebase (Authentication, Firestore, Cloud Functions, Cloud Messaging) — hosting, sign-in and the leaderboard. Data is stored in the United States (us-east1).
- RevenueCat, purchase and subscription state.
- Google AdSense, banner ads on the website version, under Google's own policy.
- Google AdMob, banner and rewarded ads in the apps, under Google's own policy for data from apps that use its services.
- Apple — the payment itself. Duck never sees your card details; no payment information ever reaches our servers.
Nothing is sold or rented. Beyond the processors above, nothing is shared with anyone else.
What other players can see
Your nickname, your social handle if you entered one, your score, your country, and the replay of your best run. Nothing else. Your email address and your account identifier are never shown to another player.
How long it is kept
Your account and scores are kept until you delete them. Replay recordings are kept only for your current best run in each mode and are overwritten when you beat it. Anti-cheat records expire automatically after 24 hours. Messages are deleted automatically 30 days after they are sent, and every message you sent or received goes with your account when you delete it. Duel-room messages are deleted with the duel.
Moderation
Messages pass a filter before they are delivered. Any player can report another from the "..." menu on their profile, choosing from a fixed list of reasons, and can block them: a block ends the conversation both ways, removes the friendship, and stops nudges and duel invitations. Reports are reviewed and acted on within 24 hours. Abuse gets accounts removed, without a warning and without a refund.
Deleting everything
Settings → Delete account. It deletes, in the app, immediately: your profile, your scores, your leaderboard entries, your replays and your sign-in. It does not file a request for someone to action later. Purchase records held by Apple and RevenueCat are outside our control and are governed by their own policies and by tax-record requirements.
Children
Duck is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, write to the address below and it will be deleted.
Your rights
You can access, correct, export or delete your data. Deletion and correction are in the app; for a copy of your data, write to us and we will send it within 30 days. If you are in the EEA or the UK, our legal basis is performance of the contract (running the game and its leaderboards) and, for the optional social handle and for personalised ads, your consent, which you can withdraw in Settings → Ad privacy choices.
Changes
If this policy changes in a way that affects what is collected, the app will say so before the change takes effect.