Privacy Policy

Last updated: 7/15/2025

1. Introduction

DropLapse ("we," "our," or "us") operates a temporary file sharing service. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.

2. Information We Collect

2.1 Account Information

  • Email address: Required for account creation and authentication
  • Password: Stored securely using bcrypt hashing
  • Subscription status: Your current plan and billing information

2.2 File Upload Data

  • Files: Temporary storage of uploaded files
  • File metadata: Name, size, upload time, expiry time
  • Download counters: Number of times files are accessed
  • Passwords: Securely hashed if you password-protect files

2.3 Technical Information

  • IP addresses: Used for upload rate limiting and abuse prevention
  • Upload timestamps: For enforcing per-IP upload limits
  • Browser information: Standard web server logs

3. How We Use Your Information

  • Service provision: To provide file sharing and storage services
  • Security: Virus scanning, abuse prevention, and rate limiting
  • Account management: Authentication and subscription management
  • Communication: Essential service emails (password resets, confirmations)
  • Legal compliance: As required by law

4. Data Retention & Automatic Deletion

  • Uploaded files: Automatically deleted when they expire (1 hour to 30 days)
  • File metadata: Deleted with the associated file
  • Account data: Retained while your account is active
  • IP addresses: Retained for upload limit tracking, periodically cleaned
  • Billing data: Retained for tax and accounting purposes as required by law

5. Your Rights (GDPR)

If you are in the EU, you have the following rights:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate personal data
  • Erasure: Request deletion of your personal data
  • Portability: Receive your data in a machine-readable format
  • Objection: Object to processing of your personal data
  • Restriction: Request restricted processing

To exercise these rights, contact us at privacy@droplapse.com

6. Data Security

  • All files are virus scanned before upload
  • Passwords are hashed using bcrypt with 12 salt rounds
  • Files are stored securely on Supabase infrastructure
  • HTTPS encryption for all data in transit
  • Regular security audits and updates

7. Third-Party Services

  • Supabase: Database and file storage (EU/US data centers)
  • Stripe: Payment processing (they have their own privacy policy)
  • ClamAV: Virus scanning service
  • Google Analytics: Website analytics and usage tracking

8. Cookies & Tracking

We use minimal essential cookies for authentication and service functionality. We also use Google Analytics to understand how visitors use our website and improve our service.

8.1 Consent Management

We respect your privacy and give you control over your data. When you first visit our website, you'll see a consent banner that allows you to choose whether to accept or decline analytics cookies.

  • Consent Banner: Appears for new users to make privacy choices
  • Granular Control: You can choose to accept or decline analytics tracking
  • Easy Management: Change your preferences anytime via our Privacy Settings page
  • Persistent Choices: Your preferences are saved and respected across visits
  • No Pre-ticked Boxes: We never assume consent - you must actively choose

8.2 Google Analytics

We use Google Analytics to collect information about how visitors use our website. This helps us understand which pages are most popular, how long visitors stay on our site, and how they navigate through our pages. Google Analytics only loads if you have granted consent.

  • Data collected: Page views, session duration, bounce rate, traffic sources, device information
  • Purpose: Website analytics and service improvement
  • Consent Required: Analytics only track if you explicitly accept
  • Data retention: Google Analytics data is retained according to Google's privacy policy
  • Opt-out: You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on

Google Analytics uses cookies and similar technologies. You can learn more about how Google uses data when you use our site by visiting Google's Privacy Policy.

8.3 Managing Your Privacy

You have full control over your privacy preferences:

  • Privacy Settings Page: Visit our privacy settings to manage your preferences
  • Browser Settings: You can also manage cookies through your browser settings
  • Clear Data: Clear your browser data to reset consent choices
  • Contact Us: Email us at privacy@droplapse.com for privacy questions

9. International Transfers

Your data may be processed in the United States or European Union through our service providers (Supabase, Stripe). These providers maintain appropriate safeguards for international data transfers.

10. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13.

11. Contact Information

For privacy-related questions or to exercise your rights:

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.