Privacy & participation
What gets posted and how your information is handled.
What we collect
When you submit a discovery, the site stores the display name, optional duck nickname, cruise line, ship, general location, discovery date, message and photo you provide. It also records when the entry was submitted and whether you chose to keep or release the duck. You do not need an account to participate.
What is public
Approved submissions appear on public duck pages and in the gallery. Do not submit your full name, cabin number, phone number, email address, or other people's personal information. Use only general locations. Photos are resized and re-encoded to remove metadata, including embedded GPS data.
Private keeper email and recovery
If you choose to keep a duck, you may optionally provide an email address for a private keeper-link message and account-free recovery. This email is not displayed on the duck page or included in the public discovery record. While you keep the duck, we store its email encrypted in the database and a non-reversible keyed lookup value. Recovery requests use one-time links that expire after 45 minutes. Restoring access replaces the old private keeper link. When you release the duck, your keeper contact and outstanding recovery requests are removed. We may send a release confirmation to the address you supplied. We do not use these messages for marketing. Your configured email service provider (Postmark or SMTP) processes the messages and may retain delivery records under its own privacy policy.
Security and abuse prevention
The site uses a short-lived browser session and anti-forgery tokens. For abuse prevention, it stores cryptographic hashes of visitors' connection IP addresses with request timestamps. Old rate-limit records are periodically removed after seven days. A private keeper URL lets the current holder release a duck. Treat that URL like a password.
Storage and third-party assets
Submissions and photos remain stored until the administrator removes them. The site loads interface assets from services such as jsDelivr, cdnjs and Google Fonts; your browser connects to those services when downloading the assets. The site does not use a third-party QR tracking service.
Reporting and removal
You can report an individual public post using the “Report post” control on its duck page. The administrator can hide inappropriate content. For a request to remove personal information or a photo, contact the site operator.
Privacy contact: alex@korittko.com
Participation guidelines
Follow your cruise line's rules and all safety instructions. Never obstruct walkways, emergency equipment, or safety signage. Do not hide ducks in food areas or restricted spaces. The aim is fun, not creating work for the crew.