Privacy Policy

We try to collect as little as possible. What we hold depends on whether you're a seller or a buyer:

• Sellers: the email you sign in with, your public profile (username and display name), the files you upload and their metadata (title, description, price, file type, size, and a SHA-256 fingerprint used to generate the cover art).
• Buyers: the email Stripe collects to send your receipt and download link, and a record of what you purchased so we can honour access.
• Payments: handled by Stripe. We receive confirmation and payout data but never your full card number.
• Usage: product analytics events (pages viewed, key actions) with a random device identifier, via Amplitude.
• Abuse prevention: a salted, one-way hash of the IP address used for reports and rate-limited actions — not the raw address.

We use your information to run the marketplace: to authenticate sellers, store and deliver files, process payments and payouts, send transactional email (receipts and payout notices), prevent fraud and abuse, and understand how the product is used so we can improve it. We do not use your files' contents for advertising, and we do not sell your personal information.

We share data only with the service providers that make Link Drop work, each handling their slice under their own privacy terms:

• Stripe — payment processing and payouts.
• Supabase — authentication, database and encrypted file storage.
• Resend — sending receipts and payout notifications.
• Amplitude — product analytics.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights and safety of our users.

Buyers purchase without creating an account, and sellers never see a buyer's identity — only that a sale happened. We collect a buyer's email solely to deliver the file and receipt and to honour the 30-day access window.

We use a small number of first-party cookies to keep sellers signed in — these are essential to the service. Amplitude analytics uses a random device identifier stored in your browser to measure product usage; it does not read your files. If no analytics key is configured, no analytics events are sent at all.

• Files stay stored until the seller deletes them. When a drop is deleted, existing buyers keep download access for 30 days, then the file is purged.
• Purchase and payout records are kept as long as needed for accounting, tax and dispute resolution.
• Account data is kept until you ask us to delete your account.

You can access and update your profile in Settings, delete your drops from your dashboard, and request access to or deletion of your personal data by emailing privacy@mail.linkdropapp.com. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA; we honour valid requests under those laws.

Files are encrypted at rest and served only over TLS from private storage. Access is enforced at the database with row-level security and delivered through signed, short-lived links tied to a paid grant. Uploads, checkout and downloads are rate-limited at the edge.

Link Drop is not intended for anyone under 18, and we don't knowingly collect data from children. If you believe a child has used the service, contact us and we'll remove the data.

If we change this policy we'll update the date above and, for material changes, give notice. Questions or requests about your privacy go to privacy@mail.linkdropapp.com.