legal

Privacy Policy

Last updated July 21, 2026

Kosher Duck Revolution, an initiative of the Atlanta Israel Coalition, Inc. (“KDR,” “we,” “our,” “us”) values your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit kosherduckrevolution.com and related domains (the “Site”).

By using our Site, you agree to this Privacy Policy. If you do not agree, please discontinue use.

1. Information We Collect

Information you provide directly:

Name, email, shipping and billing addresses, phone number (if provided).
Payment information (processed securely by Stripe, our payment processor — we do not store card numbers).
Messages sent via our forms, email, or social channels.
Photos, stories, or other user-generated content (“UGC”) submitted for community features.

Information collected automatically:

IP address, browser type, operating system.
Pages visited, time spent, referral links.
Cookies and similar technologies (see Section 7).

Information from third parties: If you interact with our Site via social media (e.g., Facebook), we may receive limited information depending on your privacy settings.

2. How We Use Information

We use your information to:

Process and ship orders.
Provide customer service.
Send transactional emails (order confirmations, shipping updates).
Send marketing communications if you have opted in (you may unsubscribe anytime).
Share updates, stories, and news about the Kosher Duck Revolution.
Improve Site performance, usability, and offerings.
Moderate and display UGC, where submitted.
Comply with legal requirements and prevent fraud.

3. User-Generated Content (UGC)

When you submit photos, videos, or stories (“UGC”) to KDR (e.g., for our sightings map), you consent to our storing and publishing that content. UGC may be displayed publicly on our Site, social media, or marketing materials.

You are responsible for ensuring your submissions do not violate the rights of others. See our Terms & Conditions for details.

Withdrawing consent. You can withdraw your consent to publication at any time by emailing [email protected] and identifying the submission. We will take the content down from surfaces we control within 30 days. Third-party republication (screenshots, reposts) is outside our control.

4. Sharing of Information

We do not sell your personal information. We may share limited information in the following cases:

Service providers: our payment processor (Stripe), our email and newsletter providers (including Substack, which powers our newsletter and mailing list, and Resend, for transactional order and confirmation email), hosting and infrastructure providers (Cloudflare), shipping carriers, and IT support.
Internal CRM: we maintain an internal contact record (your name, email, and a history of your interactions with KDR and the Atlanta Israel Coalition) so our outreach stays organized. This record is accessible only to authorized staff and is not shared with third parties except as described above.
Legal obligations: when required by law or to protect our rights, safety, or property.
Business transfers: in the event of a merger, sale, or reorganization, your data may transfer with the business.

5. International Users

We are based in the United States. When you use the Site from outside the U.S., your information is transferred to and processed in the U.S., where privacy laws may differ from those in your country.

Our U.S.-based service providers (Stripe, Substack, Resend, Cloudflare) have executed Standard Contractual Clauses (SCCs) approved by the European Commission, or rely on the EU–US Data Privacy Framework, as their transfer mechanism for personal data of EU/EEA and UK residents.

6. Data Retention

We keep personal information only as long as we need it, then delete or anonymize it. Typical periods:

Newsletter subscribers: until you unsubscribe, plus 12 months of archived history for delivery diagnostics.
Shop order records: 7 years (sales-tax and warranty).
Donation records: 7 years (IRS record-keeping obligation for the Atlanta Israel Coalition, our parent 501(c)(3)).
Contact and sighting-submission messages: 3 years.
User-generated content (photos/stories): until you withdraw consent (see §3), or the sightings map is retired.
Cookies: each cookie expires as set by the specific cookie (session, 30 days, or 12 months for preference cookies).

You may request deletion earlier (see §9), subject to our legal retention obligations.

7. Cookies

The Site uses only the cookies it needs to work. These include:

Stripe — cookies set by Stripe's checkout when you place an order or make a donation, used to complete the transaction and prevent fraud. These are only set when you enter checkout.
Session preferences — a session cookie that remembers items in your cart.

We do not currently run analytics, advertising, or marketing cookies on this site. Fonts and other assets are self-hosted on our own infrastructure, so browsing the site does not load third-party trackers. If that changes, we will update this section, disclose the specific cookies, and add a cookie banner where required.

8. Security

We take reasonable measures to protect your data from loss, misuse, or unauthorized access. However, no online platform is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on your jurisdiction, you may have rights to:

Access, correct, or delete personal data.
Request a copy of your data in portable format.
Withdraw consent for marketing communications.
File a complaint with your local data authority.

To make a request, email [email protected].

10. Children

Parts of this site are made with kids in mind. The games and activities under Jewish Joy are free to play and collect nothing — they run entirely in your browser, store no data, set no cookies, need no account, and send nothing back to us. There’s no score to save and no name to type.

Submitting a sighting works differently, because it sends us a photo and, if you choose, an email address. You must be 13 or older to submit one. If you’re under 13, ask a parent, teacher, or guardian to submit on your behalf.

We don’t knowingly collect personal information from anyone under 13. If we learn that we have, we’ll delete it promptly. For users in the EU, EEA, or UK, we require verifiable parental consent for children under 16 (or the applicable local age of consent, whichever is lower).

11. Third-Party Links

The Site may link to third-party websites or resources. We are not responsible for their content, policies, or practices. Please review their privacy policies separately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Updates are effective when posted with a revised “Last updated” date. Continued use of the Site means you accept the changes.

13. Visitors in the EU, EEA, UK, or Switzerland

If you access our Site from the EU, EEA, UK, or Switzerland, you have the following rights under the General Data Protection Regulation (“GDPR”) and UK GDPR:

Access — you can ask what personal data we hold about you.
Rectification — you can ask us to correct inaccurate data.
Erasure — you can ask us to delete your data, subject to our legal retention obligations (see §6).
Restriction — you can ask us to limit how we use your data.
Objection — you can object to processing based on our legitimate interests, including direct marketing (you can also opt out of direct marketing at any time via the unsubscribe link in every email).
Portability — for data you provided us that we process automatically, you can request a machine-readable copy.
Complaint — you have the right to lodge a complaint with your national supervisory authority. In the UK, this is the Information Commissioner's Office (ICO). In each EU/EEA country, it is the national data protection authority.

Our lawful bases for processing your data:

Consent — for newsletter signup and any non-essential cookies. You can withdraw consent at any time.
Contract — for processing donations, shop orders, and services you request from us (Article 6(1)(b) GDPR).
Legal obligation — for records we must keep for tax, accounting, or law-enforcement compliance (Article 6(1)(c)).
Legitimate interests — for site security, fraud prevention, keeping our internal CRM organized, and responding to inquiries you initiate (Article 6(1)(f)). You can object to processing on this basis.

To exercise any of these rights, email [email protected]. We respond within 30 days.

14. California Residents

KDR is an initiative of the Atlanta Israel Coalition, a 501(c)(3) nonprofit, and the California Consumer Privacy Act (CCPA) does not generally apply to nonprofits. Even so, we voluntarily extend California residents the following rights:

Right to know what personal information we collect, from what sources, for what purposes, and with whom we share it. This entire policy is designed to give you that information; ask us if anything is unclear.
Right to delete the personal information we hold about you, subject to our legal retention obligations.
Right to correct inaccurate personal information.
Right to opt out of sale. We do not sell your personal information, so there is nothing to opt out of.
Right to non-discrimination. Exercising any of these rights will not affect the service you receive from us.

To exercise any of these rights, email [email protected].

15. Contact Us

Questions about this Privacy Policy? Contact us at:

Atlanta Israel Coalition, Inc.
P.O. Box 3902
Alpharetta, GA 30023
Email: [email protected]