Ducks in a Row

Privacy notice

The Ducks in a Row software sends us nothing: it runs on your servers and never contacts us on its own. This notice covers the personal data we do receive, through this website and the email you send us.

Who we are

Haruspex Systems B.V., Zevenaar, the Netherlands, KVK 42142878, decides what happens to this data. Write to privacy@haruspex.systems about anything on this page. We sell no data, and share it only with the services named here.

Visiting this site

This site sets no cookies, runs no scripts and keeps no statistics. GitHub hosts it, and logs visitors’ IP addresses for security under its own privacy statement, which also explains its transfers to the United States. We do not receive those logs.

Email you send us

We keep your address and message to answer you: questions and feedback for two years after your last message, orders, invoices and licences for seven years as Dutch tax law requires, and security reports for ten years as product security records, holding as little about you as we can. Our basis is our legitimate interest in answering you and keeping those records, our contract when you are a customer, and the law for tax records. Hetzner Online GmbH in Germany hosts our email.

Mailing lists

We run two lists, and you choose each one separately.

Security notices. The address you give to download from this site, or to join the security list, is used only to tell you about security fixes: what is affected and which release fixes it. No marketing. Downloading from this site requires it. Our basis is legitimate interest: a fix you never hear about protects nobody, and email is our only way to reach you.

Newsletter. Release news and the occasional survey, only if you tick its box, which starts unticked. Our basis is your consent, which you may withdraw at any time without losing anything else. Each survey is optional and says what it collects and who runs it.

We track no email: no tracking pixels, no tracked links. We run both lists ourselves, on a server Hetzner Online GmbH hosts for us in Germany, and Lettermint B.V. in the Netherlands delivers the emails. Neither sends the data outside the EU. We keep your address until you unsubscribe, then only what we need to stop writing to you. An unconfirmed signup is deleted within 30 days. Every email has an unsubscribe link, and you may ask for your newsletter data in a portable format.

Your rights

You may ask to see, correct, delete or restrict the data we hold about you. We answer within one month.

You may object at any time to any use of your data that rests on our legitimate interest. Write to us and we stop, unless a legal duty requires us to keep it.

You may also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Last updated 6 October 2026.