Privacy Policy - Duckness
Effective Date: January 15, 2025
This Privacy Policy describes how Duckness ("we," "our," or "us") collects, uses, and protects your information when you use our chat application service.
1. Information We Collect
1.1. Account Information: When you create an account, we collect:
- Your chosen nickname (username)
- Password (stored in hashed form)
- Account creation timestamp
- Last login information
1.2. Channel and Communication Data:
- Channel names and codes you create or join
- The last message sent in each channel (for continuity purposes)
- Channel membership information
- Message timestamps
1.3. Recovery Information:
- Recovery codes (stored in hashed form)
- Recovery code usage logs
1.4. Technical Data:
- Browser and device information
- IP address (for security purposes)
- Session data
- Push notification subscriptions (if enabled)
2. How We Use Your Information
We use your information to:
- Provide and maintain our chat service
- Authenticate your account and manage sessions
- Enable account recovery through recovery codes
- Deliver messages and notifications
- Ensure service security and prevent abuse
- Comply with legal obligations
- Improve our service functionality
3. Information Sharing and Disclosure
3.1. We Do Not Sell Your Data: We do not sell, rent, or trade your personal information to third parties.
3.2. Limited Sharing: We may share your information only in these circumstances:
- With your explicit consent
- To comply with legal requirements or court orders
- To protect our rights, property, or safety, or that of our users
- In connection with a business transfer or merger
- With service providers who assist in operating our service (under strict confidentiality agreements)
4. Data Security
We implement appropriate technical and organizational security measures to protect your information, including:
- Encryption of sensitive data
- Secure password hashing (bcrypt)
- Regular security assessments
- Access controls and monitoring
- Secure data transmission (HTTPS)
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
5. Data Retention
5.1. Account Data: We retain your account information as long as your account is active.
5.2. Inactive Accounts: Accounts inactive for more than 90 days may be automatically deleted along with all associated data.
5.3. Message Data: We only store the last message per channel for continuity. Previous messages are not permanently stored.
5.4. Legal Requirements: Some data may be retained longer if required by law or for legitimate business purposes.
6. Your Privacy Rights
You have the following rights regarding your personal information:
- Access: Request information about data we hold about you
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and associated data
- Portability: Request a copy of your data in a portable format
- Objection: Object to certain processing of your information
- Restriction: Request limitation of processing in certain circumstances
To exercise these rights, please contact us using the information provided in the Contact section.
7. Cookies and Tracking Technologies
7.1. Essential Cookies: We use essential cookies necessary for the service to function, including:
- Session management cookies
- Authentication cookies
- Security cookies
7.2. Analytics Cookies: With your consent, we may use:
- Analytics cookies to understand service usage
- Preference cookies to remember your settings
7.3. Cookie Control: You can manage your cookie preferences at any time using the Cookie Preferences button below or through your browser settings.
8. Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will take steps to delete it promptly. If you believe we have collected information from a child under 13, please contact us immediately.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by:
- Posting the updated policy on our service
- Updating the "Effective Date" at the top of this policy
- Providing additional notice for significant changes
Your continued use of our service after any changes indicates your acceptance of the updated Privacy Policy.
11. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: giandovuolo@gmail.com
We will respond to your inquiries within a reasonable timeframe.