Privacy

Who we are

Find your Duck is in an invite-only test. The data controller is being defined and will be named here before the public opening.

In the meantime, for anything about your data write to [email protected]. We answer within a month, usually much sooner.

What data we keep

• The anonymous account. It is created on its own the first time the game saves: a friend code (like ABC-234) and a secret key that stays on your device. On the server we keep only a fingerprint of the key, not the key.
• Your @ and your farm’s name, if you choose them. They are public in the game: whoever visits your farm sees them.
• The pond: ducks, eggs, the names you give your ducks, and your actions in the game with date and time.
• Where you came from. When your account is created we note where you came from: a friend’s link, a Quack Card, one of our campaigns, or none of these. If a friend invited you, they don’t learn who you are: they only see that a friend arrived. We don’t use third-party cookies, device fingerprinting or your IP address for this.
• Your age band (under 14, 14 to 17, 18 or over), never your date of birth.
• Game events such as opening the game, the first minute and saves: names from a closed list, never free text, never your IP address.
• The reports you choose to send us from the game: the reason, your text if you write one (before it leaves we remove emails, phone numbers and links), the game version, the language and the screen size. Your account code only if you allow it.
• If you save with Apple or Google: an identifier they give us so we recognise you next time. We don’t keep your name or your email.
• Server logs: for each request the time, the path, the outcome, the account code and the network it comes from, with the IP address truncated (the last part is not there).
• Technical errors go to GlitchTip, a tool we run ourselves: with the account code, without emails, names, IP addresses or content.

The game’s operator can see an account’s activity (code, @, farm name, ducks and in-game actions, with date and time) to provide support and to improve the game. We do not ask for or keep your name, email or precise location.

What we don’t collect

Your full name, email, phone number, location, contacts, photos, microphone. No profiling cookies, no other companies’ pixels, no device fingerprinting. We don’t sell or hand over data to anyone, and we don’t run ads.

Why, and on what basis

• Running the game and keeping your progress: it’s the service you ask for by playing, under the terms of use (Article 6(1)(b) GDPR).
• Security, errors and game metrics: understanding what breaks, stopping abuse, counting in aggregate how many people come back and what works. This is our legitimate interest (Article 6(1)(f)), and we don’t use this data to profile you or for advertising.
• Legal obligations: for example tax obligations, if one day there are purchases (Article 6(1)(c)).

Where the data lives, and who else touches it

• The game server, rented from Contabo GmbH, in a data centre in the European Union. GlitchTip (errors) and ntfy (technical alerts) run on the same server, operated by us.
• Cloudflare, which delivers the pages and protects the server: it sees your IP address to do so, and may use a technical cookie against bots. It is a US company that takes part in the EU–US Data Privacy Framework.
• Apple and Google, only if you choose to save with them: their own privacy policies apply to them.
• Backups: one every night on the server, kept for 14 days; and a copy on the controller’s computer, kept for at most 12 months, used only to restore the game after a failure.
• Payments: there are none today. If they arrive, the provider will be named here first, and no card number will ever pass through our server.

How long

• Account, pond, @, farm and events: as long as you keep the account.
• Reports: 90 days, or until you delete the account if that comes first.
• Server logs: a few weeks, then they are overwritten on their own.
• Moving codes between our addresses: valid for ten minutes, deleted within a day.
• Backups: 14 days on the server, at most 12 months on the controller’s copy.

Deleting everything

In the game: open the account menu and tap “Delete account”. The server immediately deletes the account, the pond, the @, the farm, the events and your Apple or Google sign-in (with Apple we also revoke the permission). On your device you start over with a new egg.

Something remains only in the backups, until they expire (14 days on the server, at most 12 months on the controller’s copy): we don’t open them except to repair a failure.

You can also write to [email protected] with your account code.

Your rights

You can ask us to see your data, correct it, delete it, restrict its use, get a copy to take elsewhere, and you can object to processing based on our legitimate interest (Articles 15–22 GDPR). Write to [email protected]: we answer within a month.

If you think we handle your data badly you can turn to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the authority where you live.

Younger players

The game is for everyone. In Italy, from age 14 you can use an online service like this one on your own (Article 2-quinquies of the Italian Privacy Code); that’s why, at the start, we ask for an age band and not a date of birth.

Under 14, the game keeps a few things switched off: no free text in reports, no assigned neighbours, no purchases without a parent. A parent can change the band or delete the account from the game, or write to us.

Cookies and browser storage

We don’t use cookies of our own. The game keeps your progress in the browser’s storage (or in the app, on a phone): it’s only there to make the game work and no other site reads it. That’s why there is no cookie banner.

If something changes

Every version of this page has a number and a date. If something important changes, we say so in the game before it applies.