Privacy Policy
Quackwork Studios • Duckmon • Last updated: August 18, 2026
Quackwork Studios (“we”, “us”, “our”) is dedicated to protecting player privacy and being 100% transparent about data collection. This Privacy Policy explains what information we collect, how it is used, how it is protected, and your rights regarding your data.
🔒 100% Privacy Guarantee: We collect only the bare minimum data required to operate the game. We do not sell, monetize, or share player data with any third parties for marketing or advertising purposes.
01. Information We Collect
1.1 Account Information
• Verified Email Address
• Auto-generated Unique Player UUID
• Account Creation Timestamp & Login States
Note: We do not store or see player passwords. All authentication security is encrypted and handled through Supabase Auth.
1.2 Gameplay & Progression Data
In-game collection records, card binder unlocks, deck compositions, campaign branch completions, skirmish ratings, currency balances, and match history required for game functionality.
1.3 Technical Telemetry
Standard server logs, error reports, and platform IDs (e.g. Steam ID / itch.io) used exclusively for debugging and security.
02. How We Use Your Information
- Game Operation: Managing logins, cross-session cloud saves, deck validation, and campaign progress.
- Security & Fair Play: Preventing fraud, botting, duplicate exploits, and maintaining competitive card balance.
- Account Recovery: Verifying ownership when you request password resets or account assistance.
03. Data Retention & Storage
• Active Accounts: Gameplay data and authenticated player IDs are stored securely in Supabase cloud databases while your account remains active.
• Account Deletion: If you delete your account, all associated gameplay, deck, and binder data is permanently erased from the database.
04. Third-Party Services
We use vetted infrastructure providers to handle authentication, persistence, and distribution:
- Supabase: Encrypted PostgreSQL database and user authentication.
- Brevo: Automated email delivery for account verification codes.
- Steam / itch.io: Client platform distribution and cloud runtime bridges.
- Cloudflare: Website security, SSL encryption, and CDN caching.
05. Your Rights (GDPR & UK GDPR)
Under UK and EU GDPR data protection regulations, you possess full rights over your data:
06. Contact & Data Requests
To submit a data access request, ask privacy questions, or request complete account erasure, please reach out directly: