This policy explains how QoDuck (“QoDuck,” “we,” “us”) handles personal information when you visit https://qoduck.xyz, sign in with Google, purchase an access pass, or contact support.
1. Information we collect
When you sign in with Google, we receive your Google account identifier, name, email address and profile image if one is shared. We use this to create and maintain your QoDuck account. QoDuck does not offer email/password registration.
When you begin checkout, we record the plan, order identifier, amount, currency and payment status. Card and bank details are entered on Stripe’s hosted Checkout page and are not stored by QoDuck. We may receive limited payment metadata from Stripe, such as the Checkout Session identifier and whether payment succeeded.
We also receive information you voluntarily send to support, and basic technical logs needed to operate and secure the service.
2. How we use information
- Authenticate Google-only accounts and maintain signed sessions.
- Create orders, confirm payment and show access status.
- Operate the fulfillment queue and respond to support requests.
- Prevent abuse, investigate errors and protect service integrity.
- Comply with legal obligations and enforce our Terms.
3. Cookies and local storage
QoDuck uses an essential, HTTP-only session cookie for Google sign-in and entitlement state. Temporary OAuth cookies protect the sign-in flow. The queue may store a start time in your browser’s local storage so the waiting state can be restored. We do not use advertising cookies in this implementation.
4. When information is shared
We share information only as needed with service providers that support the service, including Google for identity, Stripe for payment processing, and infrastructure providers that host or secure the application. We may disclose information if required by law, necessary to protect rights or safety, or as part of a transfer of the service.
Third-party AI providers are not sent your QoDuck payment details. Their own terms and privacy policies govern any account or service they provide.
5. Retention
We retain account, order and access records for as long as needed to provide the service, resolve disputes, meet legal obligations and maintain security. Retention periods can vary based on the type of record and applicable law.
6. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete or restrict processing of your personal information, or to object to certain processing. Send requests to hello@qoduck.xyz. We may need to verify your identity before acting on a request.
7. Security
We use signed, HTTP-only sessions and keep payment collection on Stripe-hosted pages. No internet service can guarantee absolute security. Protect access to your Google account and contact us if you believe your QoDuck session or order has been compromised.
8. Children
QoDuck is not intended for anyone under 18. We do not knowingly collect personal information from children.
9. Changes and contact
We may update this policy as the service changes. The effective date at the top identifies the current version. Questions can be sent to hello@qoduck.xyz. See also our Terms of Service.