What I keep, and why.

01Who runs this

Duck Round, operated by Brandon Niehaus. Questions about your data: [email protected].

02What I collect

Waitlist: your email address, and whether you ticked the box for build updates and the founding offer.

When founding spots open, Stripe takes your payment. I see your name, email and whether the payment went through. I never see your full card number.

Access: when v1 ships, I ask for your GitHub username so I can invite you to the private repo.

Campaign tags: if you arrive from a link with UTM tags (utm_source, utm_medium, utm_campaign, utm_content), the site keeps them for your browser session and sends them to Kit with your signup, so I can see which post brought you here. Kit also receives the page address and the site you came from. If you buy, the source and campaign tags go to Stripe with your payment as a reference, so I can see which post led to the sale.

03Who handles it

Kit stores the waitlist and sends the emails. Kit records whether you open the emails and click their links, so I can tell which ones are useful. Stripe processes payments. Cloudflare hosts this site and may log IP addresses to keep it secure. GitHub hosts the private repo.

The signup form uses Kit's form script (ck.5.js), which loads only when you start using the form. It stores a random visitor ID in your browser and loads Google reCAPTCHA to block spam signups. Google receives information about your device and your IP address and may set cookies; Google's privacy policy and terms apply.

04What I use it for

Confirming your signup, sending build updates and the founding offer if you asked for them, giving you access when v1 ships, and handling refunds. I don't sell or share your data with anyone else.

05How long I keep it

Waitlist email and campaign tags: until you unsubscribe or ask me to delete them. Kit may keep a record that you unsubscribed so you aren't emailed again.

If Duck Round doesn't go ahead after the presale, I delete the waitlist within 90 days of the last refund.

Email open and click records: deleted when you unsubscribe or ask me to delete them.

GitHub username: for as long as you have repo access. I remove it if you're refunded.

Payment records: for as long as tax rules require.

Campaign tags in your browser are cleared when you close the tab.

06Your choices

Every email has an unsubscribe link. To see or delete what I hold about you, email [email protected]. Stripe keeps payment records it is required to keep by law.