Privacy Policy

Last updated September 18, 2026

This describes what DropLock collects, why, and how you can control it.

What we collect

• Account info: your name, email, and profile photo from Google when you sign in.
• Files you upload and the link settings you choose (title, expiry, password).
• Download activity: the IP address and browser user agent of anyone who downloads through one of your links, so you can see basic usage.
• Telegram details (chat ID, and your Telegram- verified phone number), only if you connect Telegram for notifications.
• Billing info handled by Creem, our payment processor — we receive your subscription status, not your card details.

Why we collect it

To run the core product: storing and serving your files, enforcing the expiry rules you set, showing you download stats, sending Telegram alerts you've opted into, and billing your subscription.

Where it's stored

Files are stored on Cloudflare R2. Account and link data is stored in our database. Storage credentials are encrypted at rest.

Who we share it with

Only the service providers that make DropLock work: Google (sign in), Cloudflare (file storage), Creem (billing), and Telegram (if you connect notifications). We don't sell your data.

Your controls

You can delete any link (and its file) at any time from your dashboard, disconnect Telegram from settings, and delete your account by contacting us. Deleting a link removes the underlying file from storage.

Contact

Privacy questions or a data deletion request? Email privacy@drop.toolitlle.com.