Privacy Policy

1. Introduction

This Privacy Policy explains how Drop CLI ("we," "us," or "our") collects, uses, and protects information when you use our file sharing service ("Service").

By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Files You Upload

• File content: Stored temporarily for up to 3 days
• File metadata: Original filename, size, upload timestamp
• File identifier: Unique ID generated for download links
• Expiration time: When the file will be automatically deleted

2.2 Technical Information

• IP address: Collected for abuse prevention and security
• User agent: Browser/client information
• Request metadata: Upload/download timestamps, file sizes
• Server logs: Basic access logs for operations and debugging

2.3 Information We Do NOT Collect

• No user accounts or registration
• No email addresses
• No personal identification documents
• No tracking cookies or analytics
• No file content scanning or analysis

3. How We Use Your Information

We use the collected information solely to:

• Provide the Service: Store and deliver your files
• Maintain security: Prevent abuse and malicious activity
• Ensure functionality: Monitor service health and performance
• Debug issues: Troubleshoot technical problems
• Comply with law: Respond to legal requests when required

We do NOT: Sell, rent, or share your data with third parties for marketing purposes.

4. File Storage and Retention

4.1 Storage Duration

Files are automatically deleted:

• After 3 days from upload time, OR
• Immediately after first download (whichever comes first)

4.2 Storage Location

Files are stored on Backblaze B2 cloud storage infrastructure. Backblaze has their own privacy policy and security measures in place.

4.3 Deletion Process

• Files are permanently deleted from storage
• Metadata is removed from our systems
• Download links become invalid
• No backups are retained

5. Data Security

5.1 Security Measures

We implement industry-standard security practices:

• HTTPS encryption: All data in transit is encrypted
• Secure storage: Files stored on enterprise cloud infrastructure
• Access controls: Limited system access to authorized personnel only
• Automatic deletion: Files don't linger on servers
• No scanning: We don't inspect file contents

5.2 Security Limitations

You should be aware that:

• Download links are not password-protected
• Anyone with the link can download your file
• No internet service is 100% secure

Recommendation: Do not upload highly sensitive or confidential information. Keep download links private.

6. Third-Party Services

Our Service relies on third-party infrastructure providers who may have access to technical data:

6.1 Cloudflare

• Provides CDN and DDoS protection
• May log IP addresses and request data
• See Cloudflare Privacy Policy

6.2 Backblaze B2

• Provides file storage infrastructure
• Files are encrypted at rest
• See Backblaze Privacy Policy

Note: We are not responsible for third-party privacy practices.

7. Cookies and Tracking

We do NOT use:

• Tracking cookies
• Analytics services (Google Analytics, etc.)
• Advertising networks
• Social media widgets

Our website is designed to work without cookies. Your browser may store minimal technical data required for HTTPS connections.

8. Your Rights and Choices

8.1 File Control

• Automatic deletion: Files are deleted after 3 days or first download
• No recovery: Once deleted, files cannot be recovered
• Link control: Keep download links private to control access

8.2 Data Access

Since we don't collect personal information or maintain user accounts, there is no personal data to access, correct, or delete beyond the temporary files you upload.

8.3 Opt-Out

Simply don't use the Service if you don't agree with this Privacy Policy. There are no accounts to delete or tracking to opt out of.

9. Children's Privacy

Our Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13.

If you become aware that a child has provided us with personal information, please contact us so we can take appropriate action.

10. International Data Transfers

Your files may be stored on servers located in different countries, depending on our cloud storage provider's infrastructure.

By using our Service, you consent to the transfer of your files to these locations, which may have different data protection laws than your country.

11. Legal Compliance

We may disclose information if required by law or legal process:

• To comply with valid legal requests (subpoenas, court orders)
• To protect our rights, property, or safety
• To investigate fraud or security issues
• To enforce our Terms of Service

Note: Given our automatic 3-day deletion policy, we likely won't have data to provide beyond current uploads.

12. Data Breach Notification

In the unlikely event of a data breach that affects user files, we will take appropriate steps to investigate and, if required by law, notify affected users through our website.

However, due to the temporary nature of our service (3-day auto-deletion), exposure windows are minimal.

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time. Changes will be effective immediately upon posting to this page, and the "Last Updated" date will be revised.

We encourage you to review this Privacy Policy periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us via email at support@dropcli.com.

15. GDPR Compliance (EU Users)

If you are located in the European Union, you have certain rights under GDPR:

• Right to access: Request information about data we hold
• Right to rectification: Correct inaccurate data
• Right to erasure: Request deletion (automatic after 3 days)
• Right to restriction: Limit processing of your data
• Right to data portability: Receive your data in usable format
• Right to object: Object to certain types of processing

Note: Since we don't maintain user accounts or collect personal data beyond temporary files, most GDPR rights are not applicable. Files are automatically deleted after 3 days.

16. CCPA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information
• Right to non-discrimination for exercising rights

We do NOT sell your personal information. We collect minimal data for service operation only.