Privacy Policy

1. Introduction

MooDuck ("we", "us", "our") operates the MooDuck browser extension and related web services. This Privacy Policy explains what information we collect, how we use it, and what choices you have.

2. Information We Collect

a) Account information. When you register, we collect your username and a bcrypt-hashed version of your password. We never store your password in plain text.

b) Usage data. We record request counts, timestamps of activity, your account balance, and full transaction history (top-ups, subscription purchases, referral bonuses, usage debits).

c) Question and answer data. Questions you submit through the extension are sent to our servers, forwarded to third-party AI APIs, and the responses are returned to you. Questions and their AI-generated answers may be stored in our server-side cache (see Section 5).

d) IP address. We log your IP address for rate-limiting and brute-force protection. We do not build persistent profiles based on IP addresses.

e) Referral data. If you use or share a referral code, we store the association between referrer and referred accounts.

3. How We Use Your Information

• To provide the Service — authenticate you, process requests, return AI-generated answers.
• To manage your account balance, subscription, and transactions.
• To enforce rate limits and protect against abuse and unauthorized access.
• To improve the Service, including optimizing the answer cache.
• To communicate important service-related updates (via Telegram support).

We do not sell your personal data. We do not use your data for advertising.

4. Third-Party AI Providers

When you submit a question, it is transmitted to one or more of the following providers:

• OpenAI — privacy policy
• Google AI (Gemini) — privacy policy
• DeepSeek — privacy policy
• OpenRouter — privacy policy

Only the question text is sent to AI providers — your username, balance, and other account details are never transmitted. Each provider processes data under its own terms. We encourage you to review their policies.

5. Data Caching

To improve performance and reduce redundant API calls, questions and their AI-generated answers are stored in our server-side cache. Similar questions from different users may be answered using cached data without a new API call. Do not submit questions containing personal, sensitive, or confidential information, as this data may persist in the cache.

Cached entries are automatically purged after a retention period (default: 90 days).

6. Cookies and Local Storage

The MooDuck website uses browser localStorage (not cookies) to store:

• Your authentication token (JWT) — cleared when you log out.
• Your preferred display language (uk or en).

We do not use tracking cookies, advertising cookies, or third-party analytics services.

7. Data Retention

• Account data is retained for as long as your account is active.
• Transaction history is retained indefinitely for financial record-keeping.
• Cached questions/answers are purged automatically after the retention period (default 90 days).
• IP logs used for rate-limiting are not retained long-term.

You may request deletion of your account and associated personal data by contacting us via Telegram support.

8. Data Security

• Passwords are hashed with bcrypt — never stored in plain text.
• All client–server communication uses HTTPS.
• Sessions are managed via short-lived JWT tokens.
• IP-based rate limiting and brute-force protection are in place.
• Access to infrastructure is restricted to authorized personnel.

While we implement industry-standard security measures, no system is completely secure. We cannot guarantee absolute security of your data.

9. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data, or to object to certain processing. To exercise any of these rights, contact us via Telegram: ✈ @mooduck_ai

10. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have done so, we will delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy at any time. Material changes will be reflected in the "Last updated" date above. Continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

12. Contact

Questions about this Privacy Policy? Contact us on Telegram: ✈ @mooduck_ai