Privacy.

Account and access

We store your email address, a Google or Apple account identifier, linked sign-in methods, account creation time and access status. Sign-in requests only identity and email information, not Gmail, Drive, iCloud files or contacts. We do not receive your Google or Apple password.

We store hashed session credentials and temporary sign-in records. Apple credentials are encrypted on our server to verify continued authorization and revoke access after account deletion. Signed Apple notifications let us respond when authorization or an Apple Account changes. Trial records contain a hashed random installation identifier, start and expiry times, and the linked CircleDuck account. This is not a hardware fingerprint.

Promotional access

When you redeem a promotion, we store the code and its start and expiry times. A keyed hash of your sign-in identity records that the offer was claimed. This record remains after account deletion so the same identity cannot restart the offer; it does not contain your email or raw provider identifier.

Purchases and support

Stripe hosts payment checkout. We share the purchasing account's email and account/order references with Stripe, and store payment references and order status to activate or revoke access. We do not store card numbers or security codes.

Support messages contain information you choose to send. Manual access changes are recorded with the administrator, reason and time so changes can be reviewed.

Why this information is used

Account, trial and order information operates the service you request. Security records prevent abuse, protect sign-in and resolve payment disputes. Purchase records may also need to be retained for applicable accounting or legal obligations.

Your local Dock's app list is used on your Mac to display the launcher. It is not sent to the CircleDuck account service. The website does not use advertising or analytics trackers.

Cookies and service providers

Essential cookies keep you signed in and protect the sign-in flow. The browser session expires after 30 days; the temporary sign-in cookie expires after 10 minutes. The Mac app stores its session in macOS Keychain.

Our hosting and Cloudflare process network requests to deliver and protect the service. Google or Apple handles the sign-in you select, and Stripe handles checkout and payment events. These providers may process information in other countries under their own privacy arrangements.

Google privacy · Apple privacy · Stripe privacy · Cloudflare privacy

Retention and your requests

Account and entitlement records are retained while needed to provide access. Expired sign-in/session records and rate-limit entries are cleaned up automatically. Order and security records are kept when needed for disputes, fraud prevention or legal obligations.

You can delete your account from your account page after a recent sign-in, or request access, correction, export or deletion by emailing support@yelduck.xyz. Deletion removes sign-in identities and sessions. A pseudonymous purchase reference remains for disputes, accounting and recovery of paid access through support with proof of purchase. Hashed installation trial records remain unlinked to the deleted account to prevent trial resets. Apple credentials awaiting revocation are encrypted and removed after Apple confirms revocation. We may need to verify account ownership. You may also raise a concern with your local data protection authority.