Privacy Policy

1. Scope of Application

This privacy policy applies to all services operated by Duckier Interactive - FZCO ("we", "us", "our") under the domain https://duckier.com, including our VPN service, DNS services, mobile applications (iOS, Android), desktop applications (Windows, macOS, Linux), and browser extensions (Chrome, Firefox).

This policy does not apply to third-party websites or services that may be linked from our platforms. We encourage you to review the privacy policies of any third-party services you access.

Duckier Interactive - FZCO reserves the right to update this privacy policy at any time. Changes will be published on this page with an updated revision date. Continued use of our services after such changes constitutes acceptance of the revised policy.

2. Our Core Privacy Principle

3. Accounts and Authentication

Our service does not require you to create an account, provide an email address, or submit any personally identifiable information to use our VPN. When you use our service, we generate ephemeral credentials in the background to authenticate your access. These credentials are used solely to verify that you have valid access rights and to connect you to one of our servers.

Because no traditional account is created, we do not store personal profiles, email addresses, or passwords associated with your usage.

4. VPN Connection Data

4.1 What We Collect

When you connect to or disconnect from our VPN service (via WireGuard, OpenVPN, SOCKS5H, HTTP/HTTPS Proxy, or Trojan protocol), we collect the following minimal data:

• A timestamp recording when a connection was established
• A timestamp recording when a connection was terminated
• An internal IP address assigned to your session within our WireGuard or OpenVPN network
• The amount of data transferred during the session (bandwidth usage)

4.2 What We Do NOT Collect

• Your originating (real) IP address
• Browsing activity, DNS queries, or traffic content
• Connection destinations or the websites and services you access

4.3 Purpose and Retention

Connection timestamps and bandwidth data are collected solely to maintain service quality and to prevent misuse of the service. This data is automatically and permanently deleted after 7 days. Internal IP assignments are ephemeral and exist only for the duration of your active session.

5. VPN Server Infrastructure

Our VPN servers operate in a stateless architecture. All connection configurations are ephemeral — they exist only in memory while the service is running. When a server shuts down or restarts, all session data, configuration files, and connection state are permanently lost. Upon restart, each server applies a fresh configuration from scratch with no knowledge of its previous state.

Servers may retain permanent configuration data solely related to our internal network infrastructure, such as routing tables and network topology information required to route traffic within our own encrypted internal network. This configuration does not contain any user data or session information.

This stateless design applies to all user-facing services running on our VPN servers, including WireGuard, OpenVPN, proxy services, and DNS.

6. DNS and DNS-over-HTTPS Service

While connected to our VPN, our DNS and DNS-over-HTTPS (DoH) service is automatically active.

• No query logging: We do not log, monitor, or store any DNS queries made through our DNS service.
• Internal access only: Our DNS service is accessible exclusively from internal IP addresses within our VPN network. External (non-VPN) access to our DNS service is not possible.
• No user correlation: While we restrict DNS access to internal IP addresses for security purposes, we do not track, log, or correlate any DNS activity to individual users.

You may choose to use a third-party DNS provider instead of ours. However, please be aware that doing so may result in your real IP address being exposed to that third-party DNS provider through DNS queries.

7. Ad-Blocking Service

We provide an ad-blocking feature that operates at the DNS level while you are connected to our VPN. Domains listed on publicly maintained blocklists are automatically null-routed, preventing connections to known advertising and tracking domains.

This service is provided as a quality-of-life feature. No additional data is collected or logged in connection with the ad-blocking functionality.

8. Traffic Re-Routing

In certain countries where legitimate communication platforms and services (such as messaging applications or voice-over-IP services) are blocked, our infrastructure may automatically re-route your traffic through our encrypted internal network to a server located in a jurisdiction where the requested service is accessible. This feature exists solely to support freedom of communication and is limited to specific, selected services.

• Re-routing applies only to select services that have been blocked for reasons we consider to be restrictions on free communication. We do not re-route traffic to illegal content, and services that are blocked for legal or regulatory reasons remain inaccessible.
• Re-routing occurs entirely within our encrypted internal network; your traffic never leaves our secure infrastructure during this process.
• No additional logging takes place when traffic is re-routed. The re-routing is handled through standard Unix-based IP routing rules applied to entire IP ranges or individual addresses.
• This feature is provided on an optional, best-effort basis. We reserve the right to enable, disable, or modify re-routing for any service at any time without prior notice.
• We respect the laws of each country in which we operate.

9. Supported Protocols and Platforms

Our VPN service is available through the following connection protocols:

• WireGuard
• OpenVPN
• HTTP / HTTPS Proxy
• SOCKS5H Proxy
• Trojan Protocol

Available on the following platforms:

• Mobile: iOS, Android
• Desktop: Windows, macOS, Linux
• Browser extensions: Chrome, Firefox (using HTTP/S Proxy or SOCKS5H)

The same privacy protections described in this policy apply uniformly across all protocols and platforms.

10. Application Features and Optional Data Collection

10.1 Push Notifications (Opt-In)

Our applications may request your permission to send push notifications. These notifications are used exclusively for service-related communications, such as:

• Server maintenance announcements
• Service status updates
• Important service-related messages

Notification tokens and preferences are not shared with any external services. You may enable or disable push notifications at any time through the application settings.

10.2 Anonymous Usage Analytics (Opt-In)

You may voluntarily opt in to anonymous usage analytics within our applications. If enabled, the following types of non-personal data may be collected:

• Application interactions (e.g., connect/disconnect actions, screen views)
• Error messages generated or captured by our software
• Connection timing metrics
• General application usage patterns

This data is collected in aggregate and is used exclusively to improve the quality and performance of our applications. Analytics are entirely optional and are not enabled by default. You can opt in or out at any time through the application settings.

10.3 Daily Availability Ping (Opt-Out)

By default, our application sends a single daily ping to our servers to indicate that the application is still installed and active. This ping contains only the following information:

• Whether you are currently connected to our VPN service (yes/no)

No private or personally identifiable information is transmitted with this ping. You may opt out of this feature at any time through the application settings.

11. Diagnostic and Testing Tools

11.1 Speed Test

We offer a speed test feature within our applications and on our website. After completing a test, the following data is saved for quality assurance purposes:

• Maximum upload speed
• Maximum download speed
• Ping (latency)
• Pseudo-anonymized requesting IP address (the last octet is dropped, e.g., 192.168.1.xxx)
• Country and ISP of the requesting connection
• The targeted server used for the test

This data is used exclusively for service quality monitoring and is not correlated to any individual user.

11.2 WebRTC Leak Test

We offer a WebRTC leak test that connects to a STUN server hosted on our infrastructure. This test helps you verify whether your real IP address is being exposed through WebRTC. We do not log any data in connection with this test.

11.3 DNS Leak Test

We offer a DNS leak test that performs DNS queries against a domain owned by us, using a nameserver under our control. To display the test results, we temporarily log the following data:

• Request timestamp
• Request IP address
• Request identifier (the unique subdomain prefix used for the test, e.g., the "abc" part in abc.example.tld)
• ISP, country, and city of the requesting connection

These results are presented to you on our website and are stored in a stateless, in-memory database with a time-to-live (TTL) of 24 hours. All DNS leak test data is automatically and permanently deleted 24 hours after creation.

11.4 IP Address Check

We offer an IP address check tool on our website that displays your current connection information, including country, region, city, ISP, and IP type. This information is generated in real time for display purposes only. We do not log or store any data from IP address checks.

12. Website Data

12.1 Cookies

Our website uses temporary (session) cookies to facilitate basic site functionality. These cookies do not contain personal information and are deleted when you close your browser or end your session.

12.2 Affiliate Tracking Cookies

For affiliate and referral purposes, we may set tracking cookies when you arrive at our website through a referral link. These cookies store only the referring affiliate identifier and have a maximum time-to-live (TTL) of 30 days. Affiliate cookies do not track your browsing activity and are used solely to attribute referrals. No personal data is shared with affiliates beyond the fact that a referral was successful.

12.3 Web Server Logs

When you access our website, our web servers may automatically collect the following technical information:

• The IP address of the requesting device
• Date and time of the request
• The data volume transferred
• Request status (success or failure)

This data is collected solely for the purpose of protecting our IT infrastructure from abuse and is retained only for a short period. This data is not correlated with VPN usage and is not used for any tracking purposes.

13. Communication

If you contact us via email or a contact form, you are free to use a pseudonym or alias. We will only request identifying information if it is necessary to fulfill a specific service-related action you have requested.

Please be aware that unencrypted email communication may not be protected from unauthorized access during transmission.

14. Data Security

We implement appropriate technical and organizational measures to protect data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• End-to-end encryption for all VPN connections
• Stateless server architecture ensuring no persistent session data
• Automatic deletion of minimal connection metadata after 7 days
• Restricted internal-only access to DNS services
• Encrypted internal network for all inter-server traffic

While we employ industry-standard security practices, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but are committed to protecting your data to the fullest extent possible.

15. Third-Party Services

We do not sell, rent, or share your data with third parties. We do not use third-party analytics, advertising networks, or tracking services on our VPN infrastructure.

Our service may contain links to third-party websites. We are not responsible for the privacy practices of those websites.

16. Your Rights

Given our minimal data collection practices, there is very little personal data associated with your use of our service. However, under applicable data protection laws, you may have the right to:

• Request information about any data we hold that relates to you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict the processing of your data
• Withdraw consent for optional features (analytics, notifications, daily ping) at any time through the application settings

To exercise any of these rights, please contact us using the information provided below.

17. Data Retention Summary

• VPN connection timestamps and bandwidth data: Automatically deleted after 7 days
• Internal IP assignments: Ephemeral; exist only during an active session
• Server configurations: Ephemeral; lost on server shutdown or restart (except internal network routing configuration)
• DNS queries: Not logged
• Browsing activity: Not logged
• Originating IP address: Not logged
• Speed test results: Stored with pseudo-anonymized IP; for quality assurance only
• DNS leak test data: Automatically deleted after 24 hours
• WebRTC leak test data: Not logged
• IP address check data: Not logged
• Affiliate cookies: Maximum 30 days TTL

18. Applicable Law

Duckier Interactive - FZCO is incorporated in the Dubai Silicon Oasis Free Zone, United Arab Emirates. This privacy policy and any disputes arising from it shall be governed by and construed in accordance with the laws of the United Arab Emirates.