Privacy Policy

Last updated: 25 July 2026

This policy explains what personal data Dropoff.sh processes and why, under the EU General Data Protection Regulation (GDPR / AVG). The controller is Bas Milius. Contact: abuse@dropoff.sh.

1. What we collect

• Account data: your email address, an optional display name, and a hashed password. If you sign in with GitHub, the identifier GitHub returns.
• Content: the documents, diagrams, code, tables, diffs and files you publish, and their metadata (titles, tags, timestamps).
• Billing data: for paid plans, billing details handled by our billing provider; we store only the plan status and identifiers.
• Technical data: minimal request logs and abuse signals, including IP address, used to keep the Service secure and rate-limited.

2. Why we process it

To provide the Service (performance of a contract), to secure it against abuse and to meet legal obligations (legitimate interest and legal duty), and to bill paid plans. We do not sell your data and do not use it for advertising.

3. How long we keep it

Published content is kept for your plan's retention period, after which it is deleted automatically. Account data is kept while your account exists. Deleting your account removes your content. Minimal logs are kept only as long as needed for security and legal purposes.

4. Who we share it with

Only with the processors needed to run the Service: our hosting provider (Cloudflare), our email provider (Postmark) and our billing provider. Each acts under a data-processing agreement.

5. Your rights

Under the GDPR you can request access to, correction of, or deletion of your personal data, object to or restrict processing, and request portability. You can delete your account and content yourself from the dashboard. To exercise any other right, email abuse@dropoff.sh. You may also lodge a complaint with your data protection authority.

6. International transfers

Data may be processed outside the EEA by our processors under appropriate safeguards such as the EU Standard Contractual Clauses.

7. Changes

We may update this policy; material changes will be reflected in the "last updated" date above.