1. Information We Collect
We collect information that you explicitly provide when creating and customizing your account, as well as data generated through your use of the platform.
- Account Credentials: Your email address and a securely hashed password used exclusively for authentication.
- Public Profile Information: Information you choose to add to your public profile, which includes your display name, location, Instagram profile link, TikTok profile link, and a custom URL.
- Social and Interaction Data: Your friends list, items or content you "favorite," and "hypes" (likes) you give or receive on the platform.
- Technical Data: Standard, non-identifying server logs (such as IP addresses, browser types, and access timestamps) to maintain site security and performance.
2. How We Use Your Information
Your data is used strictly to provide and maintain the platform's social features. Specific uses include:
- Authenticating your login sessions and securing your account.
- Rendering your public profile, custom URL redirects, and social links to other users.
- Managing your network connections (friends lists) and displaying activity updates like "hypes" and favorites.
- Sending critical system emails (such as password resets). We do not send marketing spam.
3. Data Visibility and Sharing
- Public Visibility: Your display name, location, social media links, custom URL, public favorites, and "hypes" are visible to other users of the service. Do not share information in these fields that you wish to keep private.
- Third Parties: We do not sell, rent, or trade your personal information. We share data only with the service providers needed to operate DutDut, and only for that purpose:
- Hosting — our server and database provider, to keep the site online.
- Stripe — our payment processor, if you subscribe to DutDut Premium. See "Payments" below.
- Brevo — our email delivery provider, used to send account email such as address verification and account notices. It receives your email address for that purpose only.
- Google — if you choose to sign in with Google, Google provides us your email address and basic profile information to create or match your account.
- Payments: DutDut Premium is billed through Stripe. Checkout and billing management happen on Stripe's own pages. We never see, receive, or store your card number or other payment credentials — those go directly to Stripe. What we store is limited to your subscription status and the date it runs through, so we know whether your account has Premium. Stripe's handling of your payment data is governed by Stripe's own privacy policy.
4. Cookies and Local Storage
We use essential session cookies and local storage strictly to keep you logged in and to remember your site preferences as you navigate the platform.
5. Your Rights and Data Deletion
You retain full control over your data. You can modify or remove your profile links, location, and display name at any time through your account settings.
Deleting your account. There are two ways to do it:
- In the app or on the website: sign in, open your account settings, and choose to delete your account. You will be asked to type
DELETE to confirm.
- By email: if you can no longer sign in, write to support@dutdut.dev from the email address on the account and ask us to delete it.
What deletion removes. Deleting your account permanently removes your account record and the data tied to it — your email address, display name, profile details and links, profile photo, favourites and hypes, social posts and interactions, and your game progress including levels, coins, items and any open wagers. This is immediate and cannot be undone; we cannot restore an account once it has been deleted.
What may remain. Content that is no longer linked to you may persist — for example, aggregate or anonymous statistics, and routine server logs kept for security and reliability, which age out on their own. Public marching arts results (scores, recaps and show data) are not personal data and are unaffected.
Subscriptions. If you have a DutDut Premium subscription, deleting your account also cancels it — you will not be charged again. Cancellation is immediate, so any remaining paid time ends with the account; deletion cannot be undone. In the unlikely event that the cancellation does not go through, we are alerted automatically and will cancel it by hand — and you can always contact support@dutdut.dev.
6. Updates to This Policy
We may update this Privacy Policy to reflect changes in our features or technical architecture. The "Last Updated" date at the top will reflect the most recent revisions.