Duck Tax
Tax is confusing, ducks are not!
Duck Tax

Privacy policy

Last updated 11 September 2026

Spark Games Ltd · company no. 15379140

The short version

The figures you type are worked out in your browser. They are not sent anywhere until you press a button that says it will send them, and the two buttons that do (Explain, and saving a filing) say so where you press them.

Separately from that, this site measures how it is being used: it counts page views. That does not touch your figures and sets no cookie. The detail is below, and nothing else on this page is hidden behind a summary.

Who is responsible

This site is run by Spark Games Ltd, a company registered in England and Wales, company number 15379140. We are the data controller for anything described here. For anything in this policy, including a request to delete your data, contact spark-apps.co.

Stored in your browser, not by us

The figures you type, your chosen country, and your company number and tax reference are kept in your browser’s local storage so they are still there next time. Clearing them removes them entirely. There is a link to do so beside the balance sheet, and clearing your browser data has the same effect.

Two exceptions, because “stored in your browser” is not the same as “never sent”. Your figures are genuinely never transmitted from that store; they reach us only through the two buttons named below. Your company number is sent, because looking it up is what it is for: it goes to the public register through our server, and the register’s answer is held in our cache, keyed by that number, for about a week so the next person asking the same question does not cost another request. A company name you type into the search box is cached the same way. Your tax reference is never sent anywhere.

Sent only when you ask

Looking up a company. Entering a company registration number sends that number to the public register (Companies House in the UK) to retrieve the register entry: the company name, registered office, serving officers, people with significant control, nature of business and accounts deadline. This is public information about the company, published by the register.

Last year’s figures. Asking for comparatives fetches your company’s most recently filed accounts from Companies House and reads the tagged figures out of them. Those accounts are already public documents.

Reading a website. If you enter your company’s web address, we request that page and read its description so the summary reflects what the company actually does. We only ever fetch an address you typed.

Plain-English explanations. Pressing Explain sends data to Groq, which operates the language model that writes the text. This is the derived balance sheet figures only, never your company number or tax reference. Groq processes it to generate a reply and we do not ask them to retain it.

Importing a bank statement. The file is read in your browser. What is sent to Groq is the transaction description strings on their own, with no amounts, no dates and no balances, so that each one can be sorted into a category. The amounts are totalled here and never leave.

What loads on every page

Page views. A small script from sellular.online, a Spark Games product, records that a page was opened. It sends the page address, the page title and the address of the page you came from. It sets no cookie, does not follow you across other sites, and is not tied to any account. We use it to see which pages people arrive on, because we cannot sensibly advertise a tool without knowing that.

The “Listed on Sellular” badge. The badge near the top of the landing page is an image served by sellular.online, so loading the page makes a request there, as loading any image from another site does.

The support chat. The chat bubble in the corner is operated for us by Spark Brain (sparkbrain.app), another Spark Games product. It loads on every page rather than on request, which is why it is in this list and not the one above, and it loads a font from fonts.gstatic.com. Nothing is sent to it until you type something, and then what you type goes to that service so it can answer. Do not put figures or personal details into it: it is not part of the checker, and nothing in it is needed to use this tool.

Flags. The country flag on the button and in the country picker is an image from flagcdn.com, so a page showing one makes a request there. It is not told anything about you or asked to remember you; it is simply where those pictures are hosted. The interface itself loads no webfont, it uses the typefaces already on your device, so the only request to Google Fonts this site causes is the one the support chat makes, named above.

In each case the other site necessarily sees the ordinary things any web server sees when your browser contacts it, including your IP address. None of them is given your figures, your company number or your tax reference, because this site never sends those to them.

Counting requests

Lookups, explanations, website checks and statement imports are capped per day so that a free tool cannot be run up into a bill. Signed in, the count is kept against your account. Signed out, it is kept against a salted, one-way hash of your IP address: enough to recognise the same visitor tomorrow, and not an address any more, so there is no table of IP addresses here to ask for or to leak.

If you sign in

Signing in is optional. The checker, including company lookup, the balance sheet, the errors it finds, the plain-English explanation and the downloads, works without an account. What an account adds is keeping filings, the history and year-on-year comparison built from them, and deadline reminders.

Sign-in is handled by Google; we never see your Google password. We store the identifier Google gives us, your email address, your display name and your profile picture URL.

Filings you choose to save are stored on our database, hosted by Neon in the EU. Deleting a filing deletes the record. Ask us to close your account and we delete your details and every filing with them.

Deadline reminders. If you ask us to watch a company’s filing deadline we store that company number against your account, along with which reminders we have already sent, so you are not told the same thing twice. Reminders go to your email address. If you turn on browser notifications we also store the subscription your browser issues for them, which is what lets us push a notification to that browser. Turning reminders off, or unsubscribing from one, stops both.

How long we keep things

Saved filings, tracked companies and account details are kept until you delete them or ask us to. Register records and explanations are cached for a period so that the same question is not paid for twice; that cache holds public register data and derived figures, not anything identifying you. Daily request counts are kept per day and are not a history of what you looked at. Ordinary server logs may briefly record IP addresses to keep the site working and stop abuse.

Why we are allowed to do this

Under UK GDPR, storing your account, your saved filings and the reminders you asked for is done to perform the service you asked for. Counting page views, keeping short-lived logs, and limiting how often lookups can be made rest on our legitimate interest in knowing whether the product is reaching anybody, keeping the site available, and not having our Companies House access withdrawn. If you would rather not be counted, any ordinary tracker blocker will stop all of it, and the checker works exactly the same with it blocked.

Your rights

You can ask for a copy of what we hold, ask us to correct or delete it, or object to how we use it. Contact us via the link above and we will act within one month. If you are not satisfied you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

There are no advertising or analytics cookies. The page-view script reports without setting one. Signing in sets one cookie that keeps you signed in; if you never sign in, no cookie is set.