Privacy

Last updated: TBD. This is a placeholder template.

What we collect

A hash of your email address (HMAC-SHA256), your Google subject id, and the ciphertext you upload. We never store passwords, plaintext content, or unhashed emails.

What we don't collect

Tracking cookies, full IP addresses (we hash with a daily-rotating pepper), or any analytics that fingerprint you across sites.

Retention

Shares are deleted when their TTL elapses or when you click delete. We GC R2 objects synchronously and the metadata row goes soft-deleted; an internal job purges it in < 24 hours.

EU data residency

Pro users can pin their R2 bucket to the EU jurisdiction at upload time. The control plane (Workers, D1) is global.

Your rights

Email privacy@droplet.sh to request access, export, or deletion.