DuckRoad OnlinePrivacy Policy
Last updated: 14 October 2026
This policy explains what personal data DuckRoad Online ("we", "us") collects when you visit our website or pre-register for the game, why we collect it, who we share it with and what your rights are. DuckRoad Online is an independent Silkroad Online private server project and is not affiliated with JOYMAX.
1. Data we collect
When you pre-register
- Username: the in-game name you reserve.
- Email address and phone number.
- Password: we never store it in readable form, only as a hash, in the format used by the game's account system.
- Email preference: whether you want launch news and reminders, and if/when you unsubscribed.
- Technical data: IP address, browser/device information (user agent), and your approximate location (country, region, city, postal code, timezone and city-level coordinates) as determined from your IP address by our network provider, Cloudflare.
- How you found us: campaign parameters in the link you used (for example
utm_source,utm_campaign, or an ad click ID from Facebook or TikTok), the referring website, the page you landed on and, if a friend invited you, their referral code.
When you visit the website
- Usage statistics: page views and clicks (for example opening the pre-register form, playing the trailer or clicking Discord). We count unique visitors per day using a salted one-way hash of your IP address and browser, so the statistics themselves contain no directly identifying data.
- Advertising pixels: if you visit from the Meta (Facebook/Instagram) or TikTok platforms, their pixels may collect data as described in section 5.
2. How we use your data
- To record your pre-registration, reserve your name and create your game account when the server launches.
- To send you a confirmation email and, if you agreed, launch news and reminders (see section 6).
- To prevent abuse: limiting repeated sign-ups from the same network and detecting fake accounts.
- To understand and improve our website and campaigns: which sources bring players and how the page performs.
- To measure and optimise advertising on Meta and TikTok, including telling Meta that a registration happened (see section 4).
3. Legal bases (EEA / UK visitors)
- Contract / pre-contract steps: processing your pre-registration and creating your account.
- Consent: marketing emails, and advertising cookies / pixels (Meta, TikTok) for visitors from the EU, EEA, UK and Switzerland. You can withdraw consent at any time under Cookie settings.
- Legitimate interests: security, abuse prevention and aggregated website statistics.
4. Who we share data with
We do not sell your personal data. We share it only with the service providers we need to run the project:
| Provider | Purpose | Data |
|---|---|---|
| Meta Platforms (Facebook / Instagram) | Ad measurement via the Meta Pixel and Conversions API | Page events, IP address, browser data, Meta cookies; for registrations also SHA-256 hashed email, phone, username and approximate location (country, region, city, postal code), plus a demographic audience parameter used for ad targeting |
| TikTok | Ad measurement via the TikTok Pixel | Page events, IP address, browser data, TikTok cookies |
| Brevo (Sendinblue) | Sending our emails | Email address, username, email preference, email delivery and engagement data |
| Our hosting provider | Running the website and database | All data described above, stored on our server |
| Google Fonts, jsDelivr | Delivering fonts and the phone-number country picker | IP address and browser data when the files load |
| Cloudflare | Network security, performance and approximate visitor location | IP address, browser data and request data for every visit |
| Cloudflare (Web Analytics) | Anonymous, cookieless page-load and performance statistics for our website | Page URL, referrer, browser type and approximate country – no cookies and no personal profile |
| Cloudflare (Turnstile) | Protecting the pre-registration form from bots | IP address and browser / device signals checked by the Turnstile widget. Turnstile does not use advertising cookies and does not track you across websites. |
| YouTube (Google) | Playing the trailer | Loaded only after you click play, using YouTube's privacy-enhanced mode |
We may also disclose data if required by law or to protect our rights and the safety of our players.
5. Cookies & similar technologies
When you first visit, a cookie notice explains which cookies we use. You can change your choice at any time with Cookie settings (also at the bottom of every page of our website).
- EU, EEA, UK and Switzerland: advertising cookies and pixels only run after you click Accept. Rejecting is as easy as accepting.
- Other countries: advertising cookies are on by default and you can turn them off in Cookie settings at any time. We also respect the Global Privacy Control signal of your browser.
- Everyone: necessary storage (below) and anonymous visit statistics (page views and clicks counted on our own server, without cookies) always run, because the site needs them.
| Name | Set by | Type | Purpose |
|---|---|---|---|
_fbp, _fbc | Meta | Marketing | Advertising measurement (up to 90 days) |
_ttp and related | TikTok | Marketing | Advertising measurement |
| Turnstile (no tracking cookies) | Cloudflare | Necessary | Protects the pre-registration form against bots and spam |
droadConsent (local storage) | Us | Necessary | Remembers your cookie choice (6 months) |
droadVid (local storage) | Us | Marketing | Random visitor ID, created only with marketing consent and sent hashed to Meta so your visits and sign-up can be measured together; deleted when you turn marketing cookies off |
droadAttribution (local storage) | Us | Necessary | Remembers which campaign or link brought you, so we can credit it when you pre-register |
droadAd, droadModalSeen (session storage) | Us | Necessary | Shows the page in the right mode for this visit and the welcome pop-up only once |
droadSound, droadDiscord2 (local storage) | Us | Necessary | Remembers if duck sounds are muted; caches the public Discord member count for 5 minutes |
You can also block or delete cookies in your browser settings. Rejecting advertising cookies does not affect your pre-registration.
6. Emails
After you pre-register we send a confirmation email. If you tick "Email me launch news and reminders", we also send a short series of launch emails (about 1, 7 and 14 days after you sign up) and important launch announcements. Every email contains an Unsubscribe button; unsubscribing stops these emails and does not cancel your pre-registration.
7. How long we keep your data
- Pre-registration data: until your game account has been created and for as long as the account exists, or until you ask us to delete it.
- Email preference and unsubscribe records: as long as needed to respect your choice.
- Aggregated statistics: kept indefinitely; they do not identify you.
- Backups: deleted automatically after 14 days.
8. Security
The website is served over HTTPS, the database is stored on a private server and access to the administration area is password protected. No system is completely secure, so we recommend using a password for DuckRoad Online that you do not use on any other website.
9. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and get a copy of it;
- correct inaccurate data;
- ask us to delete your data (this cancels your pre-registration and reserved name);
- object to or restrict certain processing, and withdraw consent at any time;
- lodge a complaint with your local data protection authority.
To use any of these rights, reply to one of our emails or contact the team on our Discord server. We will answer within 30 days.
10. Children
DuckRoad Online is not intended for children under 13 (or under 16 in the EEA). If you believe a child has pre-registered without permission, contact us and we will delete the data.
11. International transfers
Some of our providers (such as Meta, TikTok and Google) process data outside your country, including in the United States. Where required, these transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
12. Changes & contact
We may update this policy, for example when the game launches. The "Last updated" date above always shows the current version, and important changes will be announced on our Discord. Questions? Contact us on Discord or on our Facebook page.
See also our Terms of Service.