Duckey Privacy Policy (last updated 2026-10-24)

Duckey is an unofficial, community-developed client for Ente Auth. It is not run by Ente Technologies, Inc.

SUMMARY
- Duckey does not collect analytics or telemetry, and does not track you.
- Duckey does not sell or share your data with anyone.
- The only server Duckey talks to is the Ente server you sign in to. By default that is api.ente.io. For passkey sign-in, it opens the Ente Accounts site your server specifies (accounts.ente.com, or accounts.ente.io for older passkeys). If you set a self-hosted server, it talks to that one instead.
- Your 2FA secrets are end-to-end encrypted and are decrypted only on your device.

DATA DUCKEY HANDLES
- Email address: used to sign in; sent to your Ente server and stored in the browser's extension storage.
- Password: used on your device to derive your keys and sign in using SRP. Never stored or sent; only a derived proof goes to the server.
- Authentication token: keeps you signed in; sent to your Ente server and stored in extension storage.
- Encryption keys: stored only in extension storage (see below).
- 2FA codes and secrets: downloaded encrypted from your Ente server, decrypted on your device, and cached in session storage. Codes you add or edit are encrypted on your device before upload.
- Settings and custom domain mappings: stored only in extension storage.
- Web page content of the current tab: read in the page to find 2FA fields and suggest the right code. Never sent anywhere.
- Screenshot of the visible tab: only when you click "Scan QR code", to read the QR code. Processed in the browser, then discarded. Never sent anywhere.

LOCAL STORAGE
- If the vault timeout is anything other than "never", the decrypted master key is kept only in session storage and is cleared on lock or when the browser restarts.
- If the vault timeout is "never", the master key stays in local extension storage so the vault stays unlocked across restarts.
- If you set a PIN, the master key is stored encrypted with a key derived from that PIN.
- Logging out clears all of Duckey's stored data.

THIRD PARTIES
Duckey includes no third-party analytics, advertising or tracking code. Your use of the Ente service is covered by Ente's privacy policy: https://ente.io/privacy

The current version of this policy is at https://github.com/aheimowitz/ente-auth-extension/blob/master/PRIVACY.md. Questions: https://github.com/aheimowitz/ente-auth-extension/issues