Privacy Policy

Effective August 18, 2026 · Last updated August 18, 2026

The short version

We collect your email address, your name if Google gives it to us, and whatever job data you choose to save. That's essentially it. We don't sell it, we don't share it with advertisers, and we don't run tracking or advertising cookies. Card details never touch our servers — Stripe handles those. Ask us to delete everything and we will.

1. Who we are

The DuctDuck website and application are provided by DuctDuck Software LLC, an individual doing business as “DuctDuck”, in Ohio, United States. For anything in this policy, contact [email protected].

2. What we collect

What	Why	Where it comes from
Email address	Identifies your account, receives sign-in codes and billing notices	You, or your Google account
Name and profile picture	Shown in the app so you know which account you're in	Your Google account, if you use Google sign-in
Google account identifier	Lets you sign in with Google reliably even if your email changes	Google
Subscription status	Determines whether the app unlocks	Stripe
Stripe customer ID	Links your account to your billing record	Stripe
Job data you save	So your projects are there next time and sync between devices	You
IP address	Rate limiting, abuse prevention, and regional availability	Your connection, briefly
Server logs	Diagnosing errors	Cloudflare, automatically

What we specifically do not collect

Card numbers. Payment details go directly to Stripe. We never see or store them.
Your Google contacts, calendar, files or anything else. Sign-in requests only three basic scopes: your identity, your email address and your basic profile. Nothing more.
Advertising or cross-site tracking data. There are no advertising pixels, no third-party trackers, and no data brokers involved.
Location. Beyond the country your IP suggests, for regional availability.

3. Cookies

We use a small number of strictly functional cookies. None of them track you across sites, and none are used for advertising, which is why you don't see a consent banner.

Cookie	Purpose	Lifetime
sid	Keeps you signed in. Opaque random identifier; unreadable by JavaScript.	30 days
dd_grace	Lets the app confirm your subscription while you're offline, so a stretch of no signal doesn't lock you out.	14 days
g_csrf_token	Set by Google during sign-in to prevent request forgery. Deleted immediately after.	Minutes

Your saved jobs are also kept in your browser's local storage on your own device so the app works offline. That never leaves your device unless you turn on cloud sync.

4. Analytics

We may use Cloudflare Web Analytics, which is cookieless, collects no personal information, does not fingerprint visitors, and reports only aggregate page-level counts. If we ever adopt anything more invasive than that, this policy will be updated first and we'll tell you.

5. Who else touches your data

We use a small number of service providers. Each one only gets what it needs to do its job.

Provider	Role	What it sees
Cloudflare	Hosting, storage, network	Everything stored by the Service; request logs
Stripe	Payment processing	Your email, name, and full payment details
Google	Sign-in (optional)	That you signed into this app; provides your identity and email
Resend	Sending sign-in codes and account email	Your email address and the message contents

We do not sell your personal information, and we do not share it for advertising or cross-context behavioural advertising.

We may disclose information if legally required to, to enforce our terms, or to protect the rights and safety of users. If the business is ever sold or reorganised — including being transferred into a limited liability company — account data may transfer with it, subject to this policy.

6. How long we keep it

Account and job data: for as long as your account exists, and afterwards until you ask us to delete it.
Sign-in sessions: 30 days, then they expire automatically.
Sign-in codes: 10 minutes, stored only as a one-way hash, deleted as soon as they're used.
Rate-limit records: minutes to an hour.
Billing records: kept by Stripe as long as tax and accounting law requires.

7. Security

Practical measures rather than a list of adjectives:

Everything is served over HTTPS.
Your session identifier is random, opaque, stored server-side and unreadable by JavaScript.
Sign-in codes are stored as one-way hashes, expire in 10 minutes, are single-use, and lock out after five wrong attempts.
Sign-in and sync endpoints are rate limited.
We never receive your card details or your Google password.

No system is perfectly secure. Please keep your email and Google accounts protected, since those are how you get in. Export important work — that feature exists so your records don't depend solely on us.

8. Your choices and rights

See your data. Export any saved job from the app at any time. Email us for anything else we hold.
Correct it. Your name and email come from your sign-in method; update them there and they update here.
Delete it. Email [email protected] and we'll delete your account and data. Some billing records must be retained for tax purposes.
Stop email. Account and billing email is necessary while you have a subscription. We don't send marketing email, so there's nothing else to unsubscribe from.

Depending on where you live you may have additional statutory rights, including under the California Consumer Privacy Act. We honour those requests regardless of where you live — just email us. We will not discriminate against you for exercising a privacy right.

9. Children

The Service is for HVAC professionals and trade students and is not directed at children. We don't knowingly collect information from anyone under 16. If you believe a child has provided us information, email us and we'll delete it.

10. Where your data lives

The Service is operated from the United States and data is processed there and on Cloudflare's global network. The Service is not currently offered to customers in the European Union or the United Kingdom.

11. Changes to this policy

If we make a material change, we'll update the date at the top and notify you by email or in the app before it takes effect.

Anything unclear, or want to know exactly what we hold on you? Email [email protected] and ask. You'll get a straight answer from a person.