Privacy Policy
Duck is a score game. This policy describes exactly what it collects, why, who else sees it, and how to get rid of it. It is short because the app does little.
What Duck collects
| Data | Why | Optional? |
|---|---|---|
| Your account identifier (from Sign in with Apple, Google, or an email link) | To know that a score is yours and to let you keep it on a new phone. | No, if you want a ranked score. Guest play needs no account. |
| Nickname | Shown next to your score on the leaderboard. | Only needed to appear on a leaderboard. |
| Social handle (Instagram or TikTok) | Shown next to your score if you enter one. | Yes. Leave it blank and nothing is shown. |
| Your scores, and the recorded inputs of your best run | To rank you, and to verify the score is real by re-simulating the run on our server. The recording is what makes replay possible. | No, for ranked play. |
| Country, derived from the network your request arrives on | Country leaderboards. We never ask for it and never store a precise location. | It is derived, not collected from your device. |
| Messages you send: to a friend, or in a duel room | To deliver them to the people you sent them to. Messages between two players require both to have accepted each other as friends; duel-room messages are visible to the players in that duel. Nothing is read by anyone else, and nothing is used for any other purpose. | Yes. Not sending a message collects nothing. |
| Reports you file about another player | So we can review the report and act on it. A report records who filed it, who it is about, the reason chosen from a fixed list, and the nickname at that moment. | Yes. |
| Purchase events from Apple, via RevenueCat | To give you what you paid for and to restore it on a new device. | Only if you buy something. |
What Duck does not collect
- No advertising identifiers. Duck shows no ads and there is no ad network in the app.
- No precise or approximate device location.
- No contacts, photos, microphone, camera, or health data.
- No third-party analytics or tracking SDKs, and no cross-app or cross-site tracking of any kind.
- No artificial-intelligence provider. Nothing you type is sent to a model.
- No public posts, feeds, or profiles beyond a nickname, an optional social handle and your scores. Messages exist only between players who accepted each other, or inside a duel both players joined.
Who processes it
- Google Firebase (Authentication, Firestore, Cloud Functions, Cloud Messaging) — hosting, sign-in and the leaderboard. Data is stored in the United States (us-east1).
- RevenueCat — purchase and subscription state.
- Apple — the payment itself. Duck never sees your card details; no payment information ever reaches our servers.
Nothing is sold, rented, or shared with anyone else, for any purpose, including advertising.
What other players can see
Your nickname, your social handle if you entered one, your score, your country, and the replay of your best run. Nothing else. Your email address and your account identifier are never shown to another player.
How long it is kept
Your account and scores are kept until you delete them. Replay recordings are kept only for your current best run in each mode and are overwritten when you beat it. Anti-cheat records expire automatically after 24 hours. Messages are deleted automatically 30 days after they are sent, and every message you sent or received goes with your account when you delete it. Duel-room messages are deleted with the duel.
Moderation
Messages pass a filter before they are delivered. Any player can report another from the "..." menu on their profile, choosing from a fixed list of reasons, and can block them: a block ends the conversation both ways, removes the friendship, and stops nudges and duel invitations. Reports are reviewed and acted on within 24 hours. Abuse gets accounts removed, without a warning and without a refund.
Deleting everything
Settings → Delete account. It deletes, in the app, immediately: your profile, your scores, your leaderboard entries, your replays and your sign-in. It does not file a request for someone to action later. Purchase records held by Apple and RevenueCat are outside our control and are governed by their own policies and by tax-record requirements.
Children
Duck is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, write to the address below and it will be deleted.
Your rights
You can access, correct, export or delete your data. Deletion and correction are in the app; for a copy of your data, write to us and we will send it within 30 days. If you are in the EEA or the UK, our legal basis is performance of the contract (running the game and its leaderboards) and, for the optional social handle, your consent.
Changes
If this policy changes in a way that affects what is collected, the app will say so before the change takes effect.