Privacy policy for Duck Out!

Effective date: 2026-10-16 · อ่านภาษาไทย

Duck Out! is a puzzle game for children and families. On Google Play it is published by FuryForm, and on the App Store by Varavut Lormongkol. In this policy, “we” and “us” mean the publisher. This policy explains what information the game uses, why it uses it, and the choices you have. If you have any question, write to [email protected].

The short version

• We do not collect personal information. The game never asks for a real name, email address, phone number, home address, photos, contacts or location.
• There are no ads, no analytics and no tracking. The game has no advertising or analytics software in it and does not use the device’s advertising ID.
• There is no chat and no typing of messages. Leaderboard names and group names are built from fixed word lists.
• Most of the game works offline, and its data stays on the device.

Information that stays on the device

The game stores progress, stars, the duck’s outfits, achievements, settings, floor editor drafts and the daily reminder time in the app’s own storage on the device. This information is not sent anywhere unless you turn on cloud save. “Reset all progress” in Settings, or deleting the app, erases it.

Information sent to our server

Four parts of the game go online. They use our own server, which runs on Cloudflare.

1. The Daily Shift leaderboard

When a player finishes the day’s Daily Shift puzzle, the game sends these to the server:

• A random player ID. The app makes it up on the device the first time it is needed. It is not taken from the device, the phone number or any account, and other players never see it.
• The player name, made of words from the game’s fixed lists. The game picks a random one, and it can be changed in Settings.
• The moves used to solve the puzzle, so the server can check the solution is real.
• What the duck is wearing, as item numbers from the game’s wardrobe.
• The version of the daily puzzle.

The server keeps the date, player ID, player name, number of moves, outfit and the time of the best result. Other players see the name, the number of moves and the duck’s outfit. When the Daily Shift screen shows a leaderboard, the game also sends the player ID, so the board can mark the player’s own result.

2. Friend groups

A player can create a group or join one with a short code. The server keeps the group’s name (from fixed word lists), its code, which player IDs are members and when they joined. Members of a group see each other’s player names and Daily Shift results.

3. Cloud save

Cloud save is off until someone turns it on in Settings. When it is on, the game sends a copy of its progress and settings to the server, linked to the player ID and a secret save code. The save code is the only way to bring the progress back on another device, so keep it private. Anyone who has the code can restore that progress.

4. Technical information

Like every internet service, our server receives the IP address of the device that connects to it. We use it only to limit how many requests one device can make, to stop abuse. We do not store it with any game data. Cloudflare, our hosting provider, may keep short request logs for a few days for security and to keep the service running.

How we use information

We use the information above only to run the game’s features. That means showing leaderboards and groups, restoring saves, checking that results are real and preventing abuse. We do not sell or rent information. We do not use it for advertising, and we do not build profiles of players.

Who else receives information

• Cloudflare hosts our server and stores its data on our behalf.
• Google Play or the App Store handles purchases (see below).

We share information with no one else, unless the law requires us to.

Purchases

The game sells one unlock for the full tower and optional outfit packs. A grown-up has to answer a question before any purchase can start. Payment is handled entirely by Google Play or the App Store. We never see payment details. We only learn which items are owned, so the game can unlock them.

Notifications

The daily reminder is optional and is off until it is turned on in Settings. It is scheduled on the device, and nothing is sent to us.

Sharing

A player can share a Daily Shift result or a friend group’s join code as a short text, such as the date and number of moves. A grown-up has to answer a question first. The text goes through the device’s own share menu, and we do not receive it. Links that leave the app, such as the link to this policy, are behind the same grown-up check.

Children’s privacy

Duck Out! is made for children. We do not knowingly collect personal information from children. The game’s online features use only the information described above, which does not identify a child, and only to provide those features. We designed the game to follow the Children’s Online Privacy Protection Act (COPPA), the Google Play Families Policy and the App Store guidelines for kids’ apps.

How long we keep information

• Daily Shift results and friend groups are kept while the game’s online features run, so the leaderboards of past days (playable from the calendar) keep working.
• Leaving a group removes the membership right away.
• Cloud saves are kept until you ask us to delete them.
• Request logs at Cloudflare are kept for a few days.

Your choices and rights

• Only the Daily Shift, friend groups and cloud save go online. The tower’s floors, the floor editor and the wardrobe never send anything.
• The player name is random words and can be changed at any time in Settings.
• Parents and players can ask us to see or delete the information linked to their player. Write to [email protected]. If cloud save is on, include the save code from Settings, because it lets us find everything linked to that player. Otherwise, tell us the player name and the days played. We delete the cloud save, leaderboard results and group memberships within 30 days.
• Depending on where you live, laws such as Thailand’s Personal Data Protection Act (PDPA) or the EU’s GDPR give you further rights. Contact us to use them.

Security

The game talks to our server only over encrypted connections (HTTPS). Updating a cloud save needs its secret code. The server checks every leaderboard result by replaying it.

Changes to this policy

If we change this policy, we will update it on this page and change the date at the top. If a change affects what information the game sends, we will say so in the app or the store listing before it takes effect.

Contact

Email [email protected]. More about the game: furyform.com/products/duck_out.

---