Privacy
Last updated August 2026
The short version
- We run no backend of our own — the site is static files, and the tools run entirely in your browser.
- We keep no database of visitors, run no analytics, show no ads, and sell nothing about you.
- Signing in is handled by Privy; what you save (rooms, sessions) lives in your own browser.
- Blockchain data is public by nature — we could not delete your on-chain history if we wanted to.
What this site is
supducks.com is a static website. The Resources studio and the Bungalow render in your browser; nothing you build or place is uploaded to us. We do not operate accounts, profiles, or any server-side storage of personal information.
Signing in
Wallet connection and sign-in are provided by Privy. Depending on how you sign in, Privy processes your email address, social account handle, and/or wallet address under its own privacy policy. What reaches this site is your wallet address (and the email you signed in with, if any), and it is kept only in your browser's local storage as your session — signing out clears it.
Requests your browser makes
Like any website, using this one causes your browser to contact a few services directly. Each sees your IP address as part of any web request, plus:
- Vercel & Cloudflare serve the site and keep standard server logs.
- Google Fonts serves the two typefaces.
- Public Ethereum RPC providers receive the wallet address being looked up when holdings are read.
- OpenSea's API receives your wallet address when the Bungalow lists what a wallet holds.
- IPFS and Arweave gateways receive the token ids whose art or metadata is being fetched.
These providers act under their own privacy policies; we send them nothing beyond what the request itself requires.
What stays on your device
Your session record, saved Bungalow room layouts, and cached duck data live in your browser's local storage. They never leave it. Signing out clears the session; clearing site data in your browser removes everything.
Cookies and tracking
No advertising or analytics cookies, no trackers, no fingerprinting. The only browser storage used is the strictly necessary local storage described above.
The blockchain is public
Wallet addresses, token ownership, and transactions on Ethereum are permanently public by design. Nothing on this site changes that, and we cannot edit or erase on-chain records.
Children
This site is not directed to children under 13.
Changes
If this policy changes, the date at the top changes with it.