Privacy Policy
Last updated: November 10, 2026
Who this covers
This policy covers DemoDuck, a Chrome extension made by Aspen Roots LLC ("Aspen Roots", "we"). It also covers any data DemoDuck touches on your computer. Future Aspen Roots tools will be covered on this page too.
The short version
DemoDuck keeps your work on your computer. We do not run a server for it, we do not collect your data, and we do not use analytics or tracking. The only things that leave your computer are two small lookups you start yourself, described below.
What DemoDuck stores, and where
Everything you create is stored on your own device, in Chrome's extension storage: trackers, personas and persona groups, photos and logos you add, Library items and types, brands, glyph sets, overlay styles, tags and your settings. None of it is sent to us or to anyone else. It does not sync to other browsers, profiles or devices, and removing the extension deletes it.
Backup and Share files are made only when you ask. They are plain text files saved to your computer. They go nowhere unless you choose to send them. Because they are plain text, anyone who opens one can read it, including Library items, so keep real passwords out of the Library.
Multi-User sign-ins (optional, Beta)
If you turn on Multi-User, DemoDuck lets each browser tab keep its own sign-in to a website. To do this it reads the cookies the browser already holds for the sites in your open tabs and keeps a separate copy for each tab, and it reads request and response headers while Multi-User is on. These copies are held in the extension's session memory only. They are never written to disk, never included in a backup or Share file, and never sent anywhere. They are removed when you turn Multi-User off, close Chrome, or reload or update the extension. DemoDuck never deletes, edits or replaces the cookies Chrome has saved.
Multi-User is off until you turn it on.
Two lookups that leave your computer
Both happen only when you use the feature that needs them.
- Logos. When you use Detect Brand, or a brand has a website, DemoDuck asks the logo service logo.dev for that site's logo. What is sent is the site's domain name, not the page, and not anything you typed in DemoDuck. logo.dev has its own privacy policy.
- Fonts. When you download a brand kit that includes a font, DemoDuck asks Google Fonts for that font by name. Google has its own privacy policy.
Detect Brand reads the colors and logo of the page you are on, on your computer, when you click it. That information is used to fill in a brand in DemoDuck and is not sent to us.
What we do not do
- No analytics, tracking scripts or advertising.
- No selling or sharing of data.
- No collecting or storing your browsing history, and no recording or transmitting of the pages you visit.
- No use of your data for anything other than the features you are using, and none for creditworthiness or lending.
Browser permissions
DemoDuck asks Chrome for these permissions. Each is used only for the feature described.
- Storage: saves your trackers, personas, brands and settings on your device.
- Side Panel: shows a tracker in Chrome's side panel.
- Scripting and Active Tab: show your tracker, personas and overlays on the page, and read a page's colors and logo when you choose Detect Brand.
- Tabs: list your open tabs when you launch, and show which persona a tab is running.
- Notifications: tell you when a Modal cannot appear on a page.
- Cookies, Declarative Net Request and Web Request: used only by Multi-User, as described above, and only while it is on.
- Access to all sites: lets DemoDuck show your tracker or persona on whichever site you are demoing, and lets Multi-User work on any site.
Children's privacy
DemoDuck is a business tool for sales professionals, trainers and presenters. It is not directed at children, and we do not knowingly collect data from anyone under 13.
Changes to this policy
When this policy changes, we will update the date at the top. We will post meaningful changes that affect how data is handled before they take effect.
Contact
Questions about this policy can be sent to hello@aspenroots.io or through aspenroots.io.