Privacy policy

Desktop photos and copy history

DuckCarry reads connected media and copies it to folders you choose. Its copy ledger, preferences, thumbnails and transfer history are stored on your computer. The application does not upload your photo library to this website or a DuckCarry cloud service. Copy destinations and optional backup drives are under your control.

You can hide previews in Settings. Keep copies and backups for as long as you need them. Uninstalling the application does not automatically remove your destination folders, backups or all application data.

Optional local Wi-Fi

Starting a receiver opens a temporary HTTPS service on your computer for a phone on your private network. You choose files in the phone browser. Verify the complete certificate fingerprint before entering the pairing code. No certificate profile needs to be installed.

Completed incoming files remain in a local application inbox until you manage them. Wi-Fi sources cannot be used to delete phone files. A phone file picker may supply a converted copy rather than the library original.

Error reports (Sentry)

To find and fix problems, the desktop app sends error reports to Sentry, a service of Functional Software, Inc. in the USA that processes them for us. A report contains the error type and message with your home folder, user name, quoted texts and paths removed, the stack trace, the app version, the operating system and its version, the computer model and processor architecture, and a random installation identifier. Like any internet request, it also reaches Sentry with the IP address of the computer that sends it, and Sentry may store that address with the report.

Crash reports are always sent. Other error details and logs are sent only while Settings > Photos & privacy > Send diagnostics is on; it is on by default and you can turn it off at any time. Reports never contain your photos, videos or their contents, the names of your files, folders or phones, or license keys.

Where the GDPR or UK GDPR applies, the legal basis is our legitimate interests in keeping the app stable and secure (Art. 6(1)(f)). You can object by turning Send diagnostics off; crash reports stay on because we need them to fix crashes. Reports are transferred to the USA under Sentry's data processing terms with Standard Contractual Clauses and kept for 90 days, Sentry's default retention. Error reports are not sold or shared for advertising.

This website and contact messages

Website hosting receives technical request information, such as an IP address and browser details. If the contact form is configured, Cloudflare Turnstile processes verification information and Cloudflare D1 stores the name, email, optional company, topic, message and a verification-token hash. Do not include photos, passwords or license keys in a message.

Messages are used to answer your request and maintain service security. Form submission is unavailable if its required services are not configured. There is currently no automatic deletion schedule implemented for contact records; ask the privacy contact about access or deletion. We retain information only while needed for the request or a legal obligation and review deletion requests individually.

Analytics and service providers

Optional Google Analytics, Vercel Analytics and Vercel Speed Insights load only after analytics consent. You can refuse or withdraw that consent through Privacy choices. Global Privacy Control keeps analytics off. Hosting and security providers may process data in other countries under their own service terms and applicable safeguards. We do not sell your information or use advertising cookies.

Licenses and purchases

Website purchases of a DuckCarry license are handled by Lemon Squeezy (Lemon Squeezy, LLC, USA) as the merchant of record. Lemon Squeezy processes your name, email address, billing address or country and payment details under its own privacy policy; we never see your card. We receive the order details needed to deliver and support your license: your email address, the order number and the product and plan you bought. Lemon Squeezy is a Stripe company: card payments are processed on the infrastructure of Stripe, Inc. on Lemon Squeezy's behalf, and we never receive card data.

Activating a license sends the license key and a short computer label such as "Mac 3f9a" or "Windows PC 3f9a" (never your computer's name) to Lemon Squeezy; checking the license, about once a week, and removing it send the license key and that activation's identifier. Lemon Squeezy replies with the license status, the plan and the email address on the order. The app then keeps the license in the macOS login Keychain on a Mac and encrypted for your Windows user account (DPAPI) on Windows. Where the GDPR or UK GDPR applies, the legal basis for orders and license checks is performance of a contract (Art. 6(1)(b)).

If you buy the Mac App Store or Microsoft Store edition, Apple or Microsoft sells it and handles payment and refunds under its own terms and privacy policy; we do not receive your payment details.

Your choices

Contact the privacy address below to request access, correction or deletion, or to ask about objections, portability and consent. The rights available depend on your location and applicable law; proportionate verification may be needed. You may complain to your local data protection authority.