Privacy and your account
Updated 6 September 2026
Account information
Ducky stores your account identifier, login methods, email and its verification status, language, and any profile details you provide. Passwords are stored as salted scrypt hashes, not readable passwords. We use this information to sign you in, recover your account and manage your subscription.
Signing in with Google
Google sign-in requests only openid, email and basic profile permissions. Ducky uses your Google account identifier and verified email to create or link your account. It does not request access to Gmail messages, contacts, Drive or Calendar. Google access and refresh tokens are not retained.
Using the service
Your watchlist, alerts, creator follows and subscription records are used to provide the features you choose. Session credentials remain on your device until they expire or you sign out. Operational events help us diagnose failures; public usage counts omit groups smaller than five people.
Service providers
Cloudflare serves the website and API traffic. Resend processes email addresses and transactional emails, including verification and password recovery. Google processes the sign-in you initiate. Payment providers process the checkout you choose. Telegram receives messages only through Telegram features you use.
Deleting your account
In Account, choose Delete account to clear your profile details, login identities, password, watchlist and alerts, and revoke existing sessions. Payment and subscription records remain for accounting. Public market records do not identify your account. For privacy questions or a data request, contact the operator below.
Privacy contact: @DuckyduckyTradeBot