LAST UPDATED · 23 June 2026
This Privacy Policy explains how Aurenia Group Limited(“Aurenia”, “we”, “us”) collects, uses, shares, and protects information when you use Duck Hunter HQ (the “Service”). We’ve tried to write it in plain language. If anything is unclear, email us at hello@aureniagroup.com.
Aurenia Group Limited is the controller of the personal information processed through the Service. You can reach us about privacy at hello@aureniagroup.com.
Account & identity.When you first use the Service we create an anonymous account for you. If you claim your account, we collect your email address to verify it (we use a sign-in link/code — we don’t store a password). We keep a flag for whether an account belongs to a minor.
Profile. Your display name and username, optional home city and country, country code, chosen avatar, language preference, and your default duck-visibility setting.
Gameplay & content you create. The ducks you make (names, designs, messages, hints), your find logs (the name you sign with, the ship and ship-area, an optional note, an optional photo you upload, and the outcome you chose), thank-you messages, crew membership, experience points, levels, badges, mini-game scores, and related timestamps.
Location. If you provide a home city or a find location, we store the coordinates rounded to approximately one kilometre. We do not store precise GPS coordinates.
Payment information. If you buy a pass, our payment processor (Stripe) handles your card details — we never receive or store your full card number. We store a limited record: your subscription/pass status and renewal date, and the billing name and email you provide at checkout, so we can give you access and support.
Usage & analytics. We use PostHog to understand how the Service is used (for example, which features are opened and where people drop off). This includes product events tied to your account identifier, and standard analytics data such as approximate device/browser information. We associate your email with analytics only after you claim your account.
Infrastructure data. Our hosting and database providers may process technical data such as IP addresses transiently to deliver and secure the Service. We do not store IP addresses in our own application database.
Where data-protection law (such as the GDPR) applies, we rely on the following legal bases: performance of our contract with you (running the Service and your passes); our legitimate interests (security, analytics, and improving the Service); your consent (where requested, for example certain communications); and compliance with legal obligations.
Parts of the Service are social by design. The following may be visible to other users and the public: your public profile (display name, username, level, country, and avatar), the ducks you create and their profiles, your find logs and any photo you attach to a find, your leaderboard standings, and your mini-game scores.
When you hide a duck, you control how you appear to finders by choosing a visibility level — full (name and home city/country), first name only, or anonymous. Thank-you messages are visible only to the sender and recipient, and your hider activity feed is visible only to you.
We do not sell your personal information. We share it with service providers (processors) who handle it on our behalf, under contracts that require them to protect it:
We may also disclose information if required by law, to enforce our Terms, to prevent fraud or harm, or in connection with a merger, acquisition, or sale of assets (in which case we will continue to protect your information consistent with this policy).
We use cookies and similar storage to keep you signed in (our authentication session), remember your language preference, and power analytics. You can control cookies through your browser settings, though disabling some may affect how the Service works.
The Service is intended for users aged 13 and over. Children under 13 may participate only under a parent or guardian who manages their participation through a crew. We collect only limited information for a child’s in-game profile, and minor accounts are restricted (for example, no custom username or uploaded avatar). If you believe a child has provided us personal information without the required consent, contact us and we will delete it.
We keep your information for as long as your account is active and as needed to provide the Service. If you delete your account, we delete the personal information associated with it, except where we need to retain certain records to comply with legal, accounting, or fraud- prevention obligations (for example, billing records held by Stripe). Some content tied to other users’ experience — such as the find log on a duck — may be retained in de-identified or aggregated form.
Depending on where you live, you may have rights to access, correct, delete, export, or restrict the processing of your personal information, and to object to certain processing or withdraw consent. You can update much of your profile directly in the app, and you can set the visibility of the ducks you hide. To make a privacy request, email hello@aureniagroup.com and we will respond as required by applicable law. You also have the right to lodge a complaint with your local data-protection authority.
We and our providers may process your information in countries other than where you live, including Canada and the United States. Where required, we use appropriate safeguards (such as standard contractual clauses) to protect information transferred across borders.
We use technical and organizational measures to protect your information, including access controls, encryption in transit, and row-level security that limits who can read or write each kind of record. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. We will update the “Last updated” date and, for material changes, provide additional notice where appropriate.
For any privacy question or request, contact us at hello@aureniagroup.com. See also our Terms & Conditions.