Privacy Policy

1. Data Controller

The data controller for ducksource.blog is Chris Coveyduck, UK-based. For any data-related enquiries, please contact chris@ducksource.blog.

2. What Data Is Collected

ducksource.blog is a personal/professional blog. We collect minimal data:

• Analytics: We collect basic, privacy-respecting analytics server-side to understand which articles are read. This includes page view counts, referring sources, and approximate geography, based on a daily pseudonymous session hash. No personally identifiable information is stored for analytics purposes, and no data is stored on your device.
• Comments and user accounts: Comments and user accounts are planned for a future release. This policy will be updated when that functionality launches to reflect what data is collected, how it is used, and the legal basis for processing.
• Contact: If you email chris@ducksource.blog directly, your email address and message content are retained only as long as necessary to respond.

3. Legal Basis for Processing

Under UK GDPR, processing is carried out on the following bases:

• Legitimate interests — basic site analytics to understand what content is useful, without infringing on visitor privacy.
• Contractual necessity — for email enquiries, processing your message to respond is necessary to fulfil the communication you initiated.

4. Cookies & Analytics Opt-Out

We do not use cookies for analytics. Site analytics are collected entirely server-side (via Cloudflare Workers and D1) and do not involve storing or accessing any data on your device. No analytics cookies, pixels, or fingerprinting techniques are used.

The Cloudflare CDN (see section 5) may set its own cookies for security and performance purposes. We do not use cookies for advertising or cross-site tracking.

Opting out of analytics: In accordance with the UK Data (Use and Access) Act 2025, you have the right to object to analytics data collection. Use the button below to opt out — your preference is stored in your browser and takes effect immediately.

You are currently opted in to analytics.

5. Third-Party Services

• Cloudflare: This site is hosted and served via Cloudflare, which provides CDN, DDoS protection, and performance optimisation. Cloudflare may process visitor IP addresses and request metadata as part of its service. See Cloudflare's Privacy Policy.

6. Data Retention

Personal data is not retained indefinitely. Email correspondence is kept only as long as reasonably necessary. Analytics data is retained in pseudonymous aggregate form and is not linked to individual identities.

7. Your Rights Under UK GDPR

You have the following rights regarding any personal data we hold about you:

• Right of access — you may request a copy of any personal data held about you.
• Right to rectification — you may request correction of inaccurate data.
• Right to erasure ("right to be forgotten") — you may request deletion of your data where there is no legitimate reason to continue processing it.
• Right to data portability — you may request your data in a structured, commonly used format.
• Right to object — you may object to processing carried out on the basis of legitimate interests.

To exercise any of these rights, please contact chris@ducksource.blog. We will respond within 30 days.

8. ICO Registration

Individuals and sole traders running personal blogs in the UK may be exempt from mandatory ICO registration, depending on the nature of data processed. ducksource.blog processes minimal personal data and does not process data for commercial gain. We monitor the applicable thresholds and will register with the ICO if required. For more information, see ico.org.uk.

9. Changes to This Policy

This policy may be updated from time to time. The effective date at the top of this page reflects the most recent revision. Continued use of the site after changes are posted constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or to exercise your rights, contact: chris@ducksource.blog