Privacy

No accounts, no cookies for visitors, no ads and no cross-site tracking. Reports are anonymous. To stop spam we keep a one-way, salted hash of your IP address, never the address itself. We count visits with Umami, a privacy-friendly analytics service that uses no cookies.

Is it Duo-ready? is run by Festim Peposhi. For any privacy question or request, email festim@oda.al.

• Reports you submit: the status you choose, the positions you tried, and the optional app version, iOS version and notes. Reports are published on the site.
• Screenshots you add to a report: published with it once a moderator has approved them; rejected ones are deleted. We re-encode every image when it arrives, which removes location, device details and any other hidden data stored in the file.
• “I want this on Duo” requests and apps you add: which app, and when.
• “Did this help?” answers: which app, yes or no, and when.
• A salted hash of your IP address, stored with each report, request, answer and added app. It's a one-way fingerprint: we can tell that two reports came from the same connection, but we can't turn it back into your IP address. We use it to limit duplicates and spam, to remove spam in bulk, and to show you your own reports and requests on the “Your impact” page. That page shows them to anyone on the same connection, such as others on your Wi-Fi, and to no one else.
• Server logs: our hosting provider briefly records standard request data, including IP addresses, to run and secure the service.

Please don't put personal information in report notes or screenshots; they're public.

• No visitor cookies. The only cookie is for the site's moderators when they log in.
• No advertising, no cross-site tracking, no selling or sharing data.
• App icons and fonts are served from this site's own servers, so viewing a page doesn't send your IP address to Apple or Google.

We use Umami Cloud to see how many people visit, which pages they view, where they came from (the referring site), and their browser, device type and country. It doesn't use cookies, doesn't follow you to other sites, and doesn't give us your IP address. Your browser loads a small script from Umami's servers, which receive your IP address as part of that request, like any website you connect to. We also count a few actions (submitting a report, asking for an app, adding an app) without recording what you wrote.

The site and its database run on a server we rent from DigitalOcean, which processes data on our behalf only to run the service. Visit statistics are processed by Umami (see above). App names and icons come from Apple's public App Store search service; when you search for an app to add, your search term is sent to it from our server, not your device.

Reports, their screenshots, requests and their hashes are kept for as long as the directory exists, because they make up each app's history. Reports that moderators hide for spam or abuse stay hidden, along with their screenshots, and don't count toward statuses.

Depending on where you live (for example under the GDPR in the EU), you can ask to access, correct or delete data about you, or object to how it's used. Because reports are anonymous, tell us which report is yours (the app, the date and roughly what it said) and we'll remove it. You can also complain to your local data protection authority.

Our legal basis is legitimate interest: running a useful public directory and protecting it from abuse.