Privacy Policy
Last updated: 17 May 2026
This Privacy Policy explains what personal data we process, why, and what rights you have. It applies to everyone using DuckReward.
1. Controller
DuckReward is operated by Jetoxsy LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA. Contact: legal@duckreward.com. For privacy matters, contact privacy@duckreward.com.
2. What we collect
Account data (email, username, hashed password or OAuth identifier), profile data you provide (display name, date of birth, country, postcode), technical data (IP address, device fingerprint, browser, timestamps), activity data (offers started/completed, Ducks earned, payouts), and support communications.
3. Why we process it & legal basis
Performance of the contract: providing the Platform, tracking offers, processing payouts. Legitimate interest: fraud prevention, abuse detection, securing the service. Legal obligation: AML/KYC, tax, accounting. Consent: optional analytics and marketing emails (you can withdraw at any time).
4. Recipients
Offerwall and advertising partners receive a pseudonymous user identifier required to attribute conversions. Email and payment providers process data on our behalf as processors. Hosting, error monitoring and customer support tools run inside the EU/EEA where possible.
5. International transfers
Where data is transferred outside the EEA, we rely on European Commission adequacy decisions or Standard Contractual Clauses with supplementary measures. A list of sub-processors is available on request.
6. Retention
Active account data: while your account exists. Financial and tax records: 7 years from the relevant transaction. Fraud/security logs: 12 months. Deleted accounts: profile is anonymised within 14 days of the grace period ending; financial records are kept in anonymised form.
7. Your rights
You can request access, rectification, deletion, restriction, portability of your data and object to processing based on legitimate interest. You can withdraw consent at any time. You also have the right to lodge a complaint with your national data protection authority (in Belgium: gegevensbeschermingsautoriteit.be).
8. Deletion & grace period
Account deletion uses a 14-day grace period. Signing in within those 14 days cancels the request. After 14 days the profile is anonymised; financial records are kept (without PII) for audit and legal compliance.
9. Minors
DuckReward is not directed at people under 18. We do not knowingly process data of minors. If you believe a minor has created an account, contact privacy@duckreward.com and we will delete it.
10. Security
We use TLS in transit, encryption at rest for credentials and tokens, least-privilege access controls, and continuous security monitoring. No system is 100% secure; we encourage strong, unique passwords and enabling 2FA when available.
11. Changes
We may update this policy. Material changes are announced at least 14 days in advance by email or in-product. The "Last updated" date below always reflects the latest version.
Questions? Email privacy@duckreward.com and we will respond within 30 days.