Privacy Policy

Last Updated: September 28, 2026

1. Overview

This Privacy Policy explains what information DashDuckies ("we," "us," or "our") collects when you use our website and services (the "Service"), how we use it, and who we share it with. It forms part of our Terms of Service. If you do not agree with this policy, please do not use the Service.

2. The short version

We collect an account contact detail so you can sign in, and the sightings you choose to post. We do not track your location. Location is recorded only at the moment you submit a duck sighting, and only the location attached to that sighting. The Service runs no background, continuous, or passive location tracking of any kind.

3. Information you give us

Account information. To create an account we collect an email address or mobile phone number, which we use to send you a one-time sign-in code. You may also add your name, a profile picture, and a postal address if you order physical products.

Duck sightings. When you report a sighting, we collect the location you provide (as an address and as map coordinates), the date, any photo you upload, and any text you write. You may report a sighting without an account.

Forum posts and comments. If you post in the forum we collect the display name you give, the text of your post, and any image you attach.

Newsletter. If you subscribe, we store your email address for that purpose.

4. Location data

Location is collected only when you actively submit a duck sighting. We do not request, receive, or store your device's location at any other time, and the Service does not run in the background.

The location you submit with a sighting is published, along with the duck and any photo you attached. It appears on that duck's own page, which anyone can open without an account — that is how a person who finds a duck reads its history. It also appears on the DashDuckies sightings map, which requires a free account to view. Please do not submit a location you would not want shown publicly — for example, your home address. You are welcome to give a nearby landmark, street, or town instead of an exact address.

5. Photos and hidden photo data

Photos taken on a phone often contain hidden GPS coordinates recorded by the camera. When you upload a sighting photo, we read those coordinates, if present, to help place the sighting on the map.

We then re-encode every uploaded image before storing it, which removes the original hidden data, including GPS coordinates, from the copy we keep and publish. The photo shown on the site does not carry your camera's embedded location.

6. Information collected automatically

We record your IP address briefly in memory to limit how often submissions and sign-in codes can be requested from one place. This is used to prevent abuse and is not stored in our database or used to build a profile of you.

When you sign in, we set a cookie containing a session token so you stay signed in. This cookie is necessary for the Service to function. We do not use advertising or third-party tracking cookies.

7. How we use your information

  • To create and maintain your account and sign you in
  • To publish the duck sightings, photos and posts you choose to submit
  • To notify you when one of your ducks is spotted
  • To fulfil and deliver orders you place
  • To respond to messages and problem reports you send us
  • To protect the Service from spam, fraud and abuse

We do not sell your personal information.

8. What is public

Visible to anyone, with or without an account: a duck's page — its name, story, photo, and the sightings and locations reported for it. Duck pages are open on purpose, so that whoever finds a duck can scan its code and read its history.

Visible to anyone with a free account: the sightings map, the activity feed, and the community forum, including the display name attached to a sighting or forum post.

Your email address, phone number and postal address are never displayed publicly.

9. Service providers we share with

We share limited information with the providers that operate parts of the Service on our behalf:

  • Twilio — to send sign-in codes by SMS (receives your phone number)
  • SendGrid — to send emails and sign-in codes (receives your email address)
  • HERE — to convert an address you type into map coordinates (receives the address text you submit)
  • Microsoft Azure — to store uploaded images
  • Railway — hosting and database services

These providers may only use the information to perform their service for us. We may also disclose information where required by law, or to protect our rights, safety, or the safety of others.

10. Data retention

We keep account information for as long as your account is open. Sign-in codes expire after ten minutes. Sightings, photos and forum posts remain on the Service until removed by you or by us.

11. Your choices and rights

You can view and update your account details and your ducks while signed in. You may ask us to delete your account and associated personal information, or to correct or remove a sighting, photo or post, by contacting us at info@dashduckies.com. Depending on where you live, you may have additional rights to access, correct, delete, or restrict the use of your personal information, and to complain to your local data protection authority.

You can unsubscribe from marketing emails at any time using the link in the email.

12. Children

The Service is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, please contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last Updated" date above shows when it last changed. Continued use of the Service after a change means you accept the updated policy.

14. Contact us

Questions about this policy, or about your information, can be sent to info@dashduckies.com.