Privacy Policy — Dropley

Information We Collect

Information You Provide

When you upload a ZIP file to Dropley, we collect the file contents, filename, and any metadata included in the upload. We also collect the timestamp of your upload and your chosen expiration settings.

Information Collected Automatically

When you visit Dropley or access a published artifact, we automatically collect:

IP address: Used for rate limiting, abuse detection, and general analytics.
Browser information: User agent string, browser type and version, operating system, and device type.
Usage data: Pages visited, time spent, referring website, and interaction patterns.

How We Use Your Information

We use the information we collect for the following purposes:

Service provision: Your uploaded content is stored, processed, and published as a hosted artifact at a unique URL according to your selected options.
Analytics: We use aggregated usage data to understand how Dropley is used, improve the service, and monitor performance. Analytics are collected via Plausible, a privacy-first analytics service.
Abuse detection and prevention: IP addresses and usage patterns are monitored to detect and prevent abuse, denial-of-service attacks, and violations of our Terms of Service and Acceptable Use Policy.
Error monitoring: We use Sentry to track and diagnose application errors. Sentry may collect device and usage information necessary for debugging.

We do not sell your personal data to third parties. We do not use your data for advertising or profiling.

Data Retention

Uploaded artifacts: Your published artifacts are retained according to the expiration setting you select at the time of upload. When an artifact expires or is deleted, the underlying files and metadata are permanently removed from our systems within a reasonable period.
Log data: Server logs containing IP addresses and request metadata are retained for a limited period for security and debugging purposes, after which they are deleted or anonymized.
Analytics data: Plausible stores anonymized, aggregate data without any personally identifiable information. Individual visitor data is not retained.

Third-Party Services

Dropley uses the following third-party service providers:

Cloudflare: We use Cloudflare for content delivery (CDN), DNS, DDoS protection, and edge caching. Cloudflare processes traffic data including IP addresses in accordance with their privacy policy.
Plausible: We use Plausible for web analytics. Plausible is a privacy-friendly, cookieless analytics service that does not track users across sites or store personally identifiable information. All analytics data is aggregated and anonymized.
Sentry: We use Sentry for error tracking and performance monitoring. Sentry may collect error stack traces, device information, and usage context necessary to diagnose technical issues.

Each third-party service operates under its own privacy policy and data processing agreement.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: You may request a copy of the personal data we hold about you.
Correction: You may request that we correct any inaccurate or incomplete data.
Deletion: You may request that we delete your personal data, subject to legal retention requirements.
Objection: You may object to the processing of your personal data for specific purposes.

To exercise any of these rights, or if you have questions about this Privacy Policy, contact us at privacy@dropley.app. We will respond to your request within a reasonable timeframe.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "updated" date at the top of this policy. Your continued use of Dropley after changes take effect constitutes your acceptance of the updated policy.

Contact

For questions, concerns, or requests regarding your privacy, contact us at:

privacy@dropley.app