Privacy

• A guest account. When you open a puzzle, the site gives your browser a guest account, so it can remember how you’re doing without asking you to sign up. It has no name or email, just a random ID.
• Your game record. Which ditloids you’ve solved or given up on, how many guesses you took, whether you used the hint, and your wrong guesses (so they stay on your page, crossed out). Your streak and trail progress are worked out from this.
• Your email address, if you add it to save your streak or to sign in. It’s used to send you sign-in links, and for nothing else.
• Share links. When you share a result, the link records the ditloid and how you did (guesses, hint, streak). Anyone with the link can see that, but not who you are.
• Suggestions you send in: the ditloid, the answer and anything else you fill in. If you give a name to be credited, it’s shown with the ditloid if it’s used. If you give an email, it’s only so we can tell you, and it’s never shown.
• Technical logs. Like any website, the servers note requests, including your IP address, to keep the site running and stop abuse (for example, limiting how many guest accounts or suggestions can come from one place).

The site uses cookies only to keep you signed in, as a guest or with your email. They’re needed for the game to remember you, so there’s no cookie banner. There are no advertising, analytics or third-party tracking cookies. If you clear them, your guest record on that browser is lost, unless you’ve saved it with your email.

Your game record and account are kept to run the game you’re playing: that’s the point of the site, and it’s in both our interests (legitimate interests, in data protection terms). Your email is used because you asked to sign in with it. Logs are kept for security. Nothing is sold, used for advertising, or shared beyond the services below.

These companies run parts of the site on its behalf, and only use the data to do that:

• Supabase: the database and sign-in.
• Vercel: hosting the website.
• Resend: sending sign-in emails.

Some of them may process data outside the UK. Where they do, they use the safeguards UK data protection law requires.

Your account and record are kept until you delete them. Deleting your account removes your record, your share links and your email for good. Ditloids you suggested stay in the pile, without your email. Logs are kept for a short time by the hosting services. Guest accounts that haven’t been used for a long time may be deleted.

• Delete your account, or a guest’s record, at any time from your page.
• You can also ask for a copy of what’s kept about you, ask for it to be corrected or deleted, or object to how it’s used: email support@duckseeker.com.
• If you’re unhappy with how your data is handled, you can complain to the Information Commissioner’s Office (ico.org.uk).

The site isn’t meant for children under 13, and doesn’t knowingly collect their email addresses. If you think a child has given us theirs, email us and it’ll be deleted.

If this changes, the new version goes on this page with a new date at the top.

Email support@duckseeker.com.