Privacy Policy

Information We Collect

Account information: the email address, display name, and password you provide when you create an account (passwords are stored only as a secure cryptographic hash — we never store them in plain text).

Profile and preferences: settings such as your display preferences, language, and content you save or bookmark.

Subscription and billing information: your plan, subscription status, and billing history. Payments are handled by our payment processors (Patreon, Authorize.net, and Stripe). We do not store full payment-card numbers on our servers; we retain only limited details such as the last four digits and expiration date to help you manage your subscription.

Usage and engagement: the tutorials, scenes, and courses you view, and your likes, bookmarks, ratings, and course progress.

Device and technical data: your IP address, browser or device type, and pages visited, collected automatically by our hosting and error-monitoring providers to keep the service running and secure.

Mobile app data: if you use our apps, information about DuchyBand or DuchyCard devices you pair, and content you download for offline use.

Communications: messages you send us for support, and your email preferences.

How We Use Your Information

We use your information to operate and provide the service and your account; authenticate you and keep your account secure; process your subscription and payments; remember your preferences and personalize your experience; measure and improve the service; send you transactional messages such as receipts, security notices, and account updates; send optional onboarding or marketing emails where you have not opted out; and detect, prevent, and respond to fraud, abuse, or security issues, and comply with our legal obligations.

How We Share Information

We do not sell your personal information. We share information only with service providers who process it on our behalf, and only as needed to run the service: Supabase (database, authentication, and file storage); Vercel (website hosting and content delivery); Sanity (content management); Patreon, Authorize.net, and Stripe (payment processing); Sentry (error and performance monitoring); our email-delivery provider (transactional and sequence emails); and Google reCAPTCHA and analytics (bot protection and traffic measurement).

Each provider processes data under its own terms and privacy policy. We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and security of our users, the public, or TheDuchy.

Cookies & Similar Technologies

We use cookies and similar technologies for essential functions (such as keeping you signed in and remembering member access), for preferences, and for security and analytics (such as reCAPTCHA and traffic measurement). You can control or delete cookies through your browser settings, but disabling essential cookies may prevent you from signing in or using some features.

Data Retention

We keep your personal information for as long as your account is active and as needed to provide the service. We also retain certain information as required to meet legal, tax, accounting, or security obligations. You may ask us to delete your account and associated personal information at any time (see "Your Rights & Choices").

Your Rights & Choices

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, receive a copy in a portable format, or object to or restrict certain processing. You may also opt out of marketing emails at any time using the unsubscribe link or your account settings.

If you are in California, the CCPA gives you the right to know what personal information we collect, to request its deletion, and to opt out of the "sale" of personal information — and we do not sell personal information. If you are in the European Economic Area or the United Kingdom, you have rights under the GDPR, and we process your information on the legal bases of performing our contract with you, your consent, our legitimate interests in operating and improving the service, and compliance with law.

To exercise any of these rights, contact us using the details below. We will respond within the time required by applicable law.

Data Security

We protect your information using industry-standard measures, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, so while we work hard to protect your information, we cannot guarantee absolute security.

Younger Users

TheDuchy publishes rope-safety education for a general audience. The service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, please contact us and we will delete it.

Changes to This Policy

We may update this policy from time to time. When we do, we will revise the date below and, for material changes, provide a more prominent notice. Your continued use of the service after an update means you accept the revised policy.

Contact Us

If you have questions about this policy or your personal information, contact us at privacy@theduchy.com or through our Contact page.