Privacy policy

Last reviewed: June 28, 2026.

Why does this page exist?

We take privacy seriously.

This page explains exactly what data we collect on this site, why we collect it, and what we do with it.

No fine print, no surprises.

Who is responsible for your data?

This site is run by InOut Games, the studio behind Lucky Ducky.

InOut Games (operated by IOGr B.V., registration number 161532) is the data controller for the personal data described on this page.

Registered address: Julianaplein 36, Willemstad, Curaçao.

For any privacy question or request, email [email protected] or use our contact page.

What do we collect?

In plain terms, very little. We do not ask you to create an account.

• Aggregated analytics through Clicky, a privacy-friendly analytics tool. It tracks page views, referrers, country, and device type so we understand how people use the site. Clicky is cookie-light and does not build advertising profiles. You can read the Clicky privacy policy for the full detail.
• Contact form submissions. When you message us, we receive your name, your email address, and your message so we can reply. We do not add you to any list.
• Local preference flags stored in your browser, such as your language or theme choice. These never leave your device.

That is the whole list.

What do we never do?

• No personal accounts
• No selling, renting, or sharing your data
• No advertising networks
• No retargeting
• No data brokers

Cookies

This site is cookie-light. We use:

• First-party preference flags stored in your browser to remember choices like your language. No tracking, just a remember-me setting.
• Clicky analytics to measure how people use the site. Clicky is built to be privacy-friendly and does not set advertising cookies.

We do not use marketing cookies, retargeting cookies, or third-party advertising cookies.

Where does your data live?

This site runs on Cloudflare, which serves the pages from servers worldwide.

Analytics are handled by Clicky.

Contact form messages are delivered to our inbox through Resend, our email sending provider.

We choose providers that take security and privacy seriously.

International data transfers

Some of our providers are based in the United States, so your data may be processed there.

When data moves outside the EU, the UK, or your home region, we rely on safeguards such as the EU Standard Contractual Clauses and each provider's own data-protection frameworks.

How long do we keep your data?

• Clicky analytics: kept as aggregated, anonymous totals, never tied to you personally.
• Local preference flags: until you clear your browser.
• Contact form messages: kept until your request is resolved, then deleted within 12 months.

Our legal basis (EU and UK visitors)

When the GDPR (General Data Protection Regulation) or UK GDPR applies, we rely on these legal bases:

• Legitimate interests, to keep the site secure and understand aggregate traffic, balanced against your rights.
• Responding to your request, when you send us a message and we reply.

Your rights

Even with the limited data we collect, you have the right to:

• Ask what we hold on you
• Get a copy of it
• Request deletion
• Object to processing

EU and UK visitors (GDPR)

You also have the right to restrict or object to processing, to data portability, and to withdraw consent at any time.

You can lodge a complaint with your local data protection authority, for example the CNIL in France or the ICO in the United Kingdom.

US visitors

Depending on your state, including California (CCPA and CPRA), you have the right to know what personal information we collect, to access or delete it, and to opt out of its sale or sharing.

We do not sell or share your personal information as those laws define it, so there is nothing to opt out of.

You will never be treated differently for exercising any of these rights.

To exercise any right, email [email protected] or use our contact page. We aim to respond within 30 days.

Children's privacy

Lucky Ducky is for adults only, 18+, and 21+ in some regions.

This site is not directed to children.

We do not knowingly collect personal data from anyone under 18, and in the United States we do not knowingly collect it from children under 13.

If you believe a minor has submitted data to us, email [email protected] so we can remove it.

Data security

Where data is stored, it is protected by the security infrastructure of the providers we use, such as Cloudflare and Resend.

We do our part by limiting access and collecting only what we need.

Where can you learn more?

• Responsible gambling, help if playing stops being fun
• Affiliate disclosure, how we make money
• Contact, how to reach us
• Legal notice, who publishes and hosts this site

Updates to this policy

We update this policy whenever something changes, whether that is a legal requirement or the way we run the site.

When we update it, we change the "Last reviewed" date at the top.