Draft privacy notice

Version: test-draft-2026-10-28. The final legal entity and retention policy require approval before commercial launch.

Host accounts store a name, verified email address and hashed password. Purchase records contain public sailing details, consent versions, payment references and hunt ownership. Stripe hosts card entry; Lucky Ducky does not store card numbers.

Customer sessions use encrypted server storage. Login protection uses hashed rate-limit keys. Guest accounts and child profiles are not part of this product.

Enter public sailing details rather than private booking references. Image processing removes embedded metadata. Final deletion and retention procedures are part of the launch review.