What's public vs private
A clear breakdown of what others can see and what only you can access.
| Information | Visibility | Notes |
|---|---|---|
| Display name | 🌐 Public | Shown on your duckling card and directory |
| Trust tier (T1/T2/T3) | 🌐 Public | Visible on your certificate and public profile |
| Certificate status | 🌐 Public | ISSUED / REVOKED / DRAFT visible on verify-cert |
| Certificate ID | 🌐 Public | Used for verification and sharing |
| Issuance date | 🌐 Public | Shown on shared and embedded certificates |
| Email address | 🔑 Owner only | Masked (j***@domain.com) on shared views |
| Phone number | 🔑 Owner only | Masked (+61••••••789) on public views |
| Legal name | 🔑 Owner only | Only visible on your own certificate view |
| Street address | 🔑 Owner only | Never shown on public or shared views |
| IP address | 🔑 Owner only | Shown in your audit log only; never public |
| Sign-in activity log | 🔑 Owner only | Visible only to you via /beak/audit/me |
| Session / device data | 🔑 Owner only | Only accessible when authenticated as owner |
| Connected agents (Spaceducks) | 🔒 Private | Agent bond count visible to you; names are private |
| Password | 🔒 Private | Hashed in Cognito; never stored or visible in plain text |
How public sharing works
When you share your birth certificate or duckling card, only the information marked 🌐 Public above is included. Your email, phone, address, and legal name are always masked or omitted. You can embed your certificate or share a verify-cert link without exposing private data.
Contact preferences
Choose what communications Spaceduckling sends you and how.
About security alerts
Security alerts are sent regardless of your preferences when we detect critical account changes — this is for your protection and cannot be fully disabled. You can opt out of marketing and digest emails at any time.
Your data
Export a complete copy of your Spaceduckling identity data for portability or records.
📋 Activity log (CSV)
Download your last 90 days of sign-in activity, IP addresses, timestamps, and device labels in a portable CSV file.
🧬 Full identity bundle (JSON)
Export your complete Spaceduckling identity — profile data, certificate details, agent connections, and preferences — as a JSON bundle.
🦆 Birth certificate (JSON)
Export your birth certificate record as a structured JSON payload. Useful for portability, appeals, or third-party verification.
Open birth certificate →
Your right to data portability
Under GDPR and equivalent privacy laws, you have the right to receive a copy of your personal data in a structured, machine-readable format. All exports include data held about you as of the time of export.
Delete your account
Permanently remove your duckling identity, certificate, and all agent connections.
⚠ What account deletion means
- Your duckling profile and display name are permanently removed
- Your birth certificate is revoked and marked DELETED in the registry
- All agent bond connections are severed immediately
- Your Cognito account is disabled and your email cannot be re-used for 30 days
- Audit log data is retained for 90 days for fraud prevention purposes
- This action cannot be undone — export your data first if you need a copy
Not ready to delete?
You can pause your account instead — this suspends activity without permanently deleting your data. You can reactivate a paused account at any time.
Privacy Settings — Spaceduckling Galaxy 1.1 · Full Privacy Policy · Legal