Plain-English privacy
Share only what you want the family to see.
Reporting a duck is optional. We ask only for a first name, broad home location, who you are traveling with, a short story, an optional date, and an optional photo. We do not ask for your email, phone number, exact location, cabin number, account, or marketing permission.
Public versus private
Your report starts private. One checkbox lets you allow your first name, broad home location, and written answers to appear publicly. A separate checkbox covers your photo and the likeness of everyone shown. Both are off by default, and the family reviews every submission before anything can enter the gallery.
Photos
Before uploading, you must confirm that everyone pictured has permitted their likeness to be shared, including parent or guardian permission when a child appears. Accepted uploads are stored privately. Public gallery images are separate, resized copies with metadata removed. Only a finder-permitted, family-approved copy may be served publicly.
Retention
Rejected material is queued for deletion. Pending and private reports are not kept forever. Final retention timing will be published before the live finder form opens.