--- title: "Cookie Policy | DuckyHelper" url: "https://duckyhelper.com/legal/cookies/" description: "duckyhelper.com uses a few first-party cookies and a little browser storage. No third-party cookies, no ad pixels, no third-party scripts." updated: "2026-10-01" --- # Cookie Policy Version 1.1 ยท Effective October 2, 2026 In short - duckyhelper.com uses a few first-party cookies and a little browser storage. No third-party cookies, no ad pixels, no third-party scripts. - Nothing beyond what's strictly necessary runs until you choose in the banner. "Reject all" is as easy as "Accept all". - Analytics are our own, run on our own servers, and only with your yes. We never store your IP address. - Change your mind any time with "Your privacy choices" at the bottom of every page. We honour Global Privacy Control. This policy explains the cookies and similar storage used by duckyhelper.com, run by **MingLLM, Inc.** ("we"). It's part of our [Privacy Policy](https://duckyhelper.com/privacy/). The DuckyHelper app for Mac is covered by the Privacy Policy and the [macOS App License](https://duckyhelper.com/legal/eula/). ## 1. Your choices On your first visit a small banner offers **Reject all**, **Accept all** and **Choices**. Until you choose, the site sends no analytics, sets no visitor id and stores nothing beyond what's strictly necessary. **Choices** lets you switch on or off: - **Necessary** (always on): what the site needs to work and to remember your choice. - **Analytics**: our own first-party measurement (below). - **Marketing** (needs Analytics): lets us connect the pages you looked at to an email sign-up, so our emails can be about what you were interested in (for example, plans). You can reopen these choices any time with **Your privacy choices** at the bottom of every page. Your choice lasts 182 days, then we ask again. If we change the categories or this policy, we ask again before anything non-essential runs. Turning Analytics off deletes the visitor cookie and asks our server to delete what it kept about that visitor id. **Global Privacy Control.** If your browser sends the Global Privacy Control signal, Analytics and Marketing stay off and can't be turned on while it's sent, and the banner tells you we honoured it. ## 2. What we use | Name | Type | Category | What it's for | How long | | --- | --- | --- | --- | --- | | `dh_consent` | cookie | Necessary | Remembers your choice: the policy version, Analytics yes or no, Marketing yes or no, when you chose, and whether your browser sent Global Privacy Control | 182 days | | `dh_vid` | cookie | Analytics | A random visitor id (22 characters). Nothing about you or your device is in it | 13 months; deleted when you turn Analytics off | | `dh_capture` | browser storage | Necessary | Remembers when the email sign-up box last appeared, or that you closed it or signed up, so it shows at most once in 14 days and never again after you close it or sign up. Timestamps only, never sent anywhere | Until you clear your browser's storage | | `ducky.signedIn`, `ducky.email` | browser storage | Necessary | After you sign in on the site: that this browser is signed in, and your account's email to show | Until you sign out or clear storage | | `ducky.signin.state` | session storage | Necessary | A random value that protects the sign-in hand-off from forgery | Until you close the tab | | `ducky.app` | browser storage | Necessary | After you sign in on the site: whether your account's Mac app was ever seen (installed, its version, when it was last seen), so the site stops offering the download | Until you clear your browser's storage | | `dh_download` (`clicked`, `dismissed`) | browser storage | Necessary | Remembers that you pressed the Download (or web app) button, or closed the download bar, so the bar stops. Timestamps only, never sent anywhere | Until you clear your browser's storage | | `dh_download` (`first`) | browser storage | Analytics | On a Mac: when you first came, so the download bar waits for a returning visitor. A timestamp, never sent anywhere | Until you clear your browser's storage; deleted when you turn Analytics off | | `dh_session` | session storage | Analytics | On a Mac: whether this visit is your first or a return, read with `dh_download`'s `first`. Never sent anywhere | Until you close the tab; deleted when you turn Analytics off | | `dh_ref` | session storage | Necessary | The code of a friend's invite link you followed. It's added to the site's links to the web app and the sign-up, so a new account gets the invite's minutes | Until you close the tab | | `dh_touch` | session storage | Analytics | Where this visit started: the first page seen with Analytics on, its campaign tags (`utm_` parameters) and the outside site that sent you there (its name only). Added to the links to the web app and the sign-up, so a new account can keep it (see the [Privacy Policy](https://duckyhelper.com/privacy/), section 1K). Never set under Global Privacy Control | Until you close the tab; deleted when you turn Analytics off | | `dh_device` | cookie, on our sign-in service's own address | Necessary (security) | Recognises a device you signed in from before, so we can email you about sign-ins from new devices, and so an invite link can't be used to invite yourself | 2 years | | `dh_u13` | cookie, on our sign-in service's own address | Necessary (child safety) | After someone says they're under 13 at sign-up, keeps that browser on the "ask a parent" page for a day, so a different birthday can't skip it | 1 day | Fonts are served by the site itself, so no font service sees your visit. ## 3. What our analytics record Only after you say yes to Analytics, the site sends to our own servers (no other company receives it): the random visitor id, the pages you view (without query strings), the website that sent you (outside sites only, without query strings), campaign tags (`utm_` parameters), whether a page was your first, how far down you read, clicks on the main buttons (such as Download and Sign in), your browser's timezone (for a country), and, if you sign in on the site, the account it belongs to. We store your coarse country, device type (phone, tablet or computer), browser and operating system family, where you first came from, and what you looked at. **We never store your IP address**: only a scrambled hash made with a random value that changes every day and is deleted after 2 days. We never store your full browser details, query strings or anything you type. Records are kept 13 months; daily totals with no ids are kept. We don't use analytics to show you ads, and we don't sell or share it. ## 4. The app The DuckyHelper apps (the Mac app, and the web app at app.duckyhelper.com) don't use advertising or analytics cookies. They keep your sign-in, and the sign-in page keeps the `dh_device` cookie. Uninstalling the Mac app removes them from your Mac; in a browser, signing out or clearing its storage does. ## 5. Contact Questions: **privacy@duckyhelper.com**.