Privacy Policy

1. Introduction

DuckLinked ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

2. Information We Collect

Information You Provide

• Account Information: Email address and display name when you create an account
• Messages: Text messages you leave on duck pages
• Photos: Images you choose to upload
• Location: City-level location data (only when you choose to share it)

Information Collected Automatically

• Usage Data: Pages visited, features used, and interactions with the Service
• Device Information: Browser type, operating system, and device type
• Log Data: IP address, access times, and referring URLs

3. Location Data & Privacy

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Display duck journeys and messages to other users
• Create and manage your account
• Respond to your comments, questions, and requests
• Send you technical notices and security alerts
• Detect, prevent, and address fraud and abuse
• Generate aggregated, anonymized statistics about duck travel patterns

5. Information Sharing

Public Information

The following information is publicly visible to other users:

• Your display name (or "Anonymous Duck Friend" if you don't provide one)
• Messages you leave on duck pages
• Photos you upload
• City-level location information you provide

We Do NOT

• Sell your personal information to third parties
• Share your email address publicly
• Store precise GPS coordinates
• Track your location without your explicit consent

Third-Party Services

We may share information with:

• Supabase: Our database and authentication provider
• Vercel: Our hosting provider
• Google: For OAuth authentication (if you sign in with Google) and reCAPTCHA
• OpenStreetMap: For reverse geocoding (converting coordinates to city names)

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS)
• Secure password hashing
• Row-level security in our database
• reCAPTCHA protection against bots

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Duck journey data (messages, locations, photos) is retained indefinitely to maintain the historical record of each duck's travels, unless you request deletion.

8. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a portable format
• Objection: Object to certain processing of your data

To exercise these rights, contact us at privacy@ducklinked.com

9. Cookies

We use essential cookies to maintain your session and authentication state. We do not use tracking cookies or third-party advertising cookies.

10. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

11. International Users

If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

• Email: privacy@ducklinked.com