What the website stores
If you create a website account, we store your email address, a salted password hash, and a limited event log. The event log records actions such as signup, login, downloads, and support requests so we can run the service and help when something goes wrong. We never store your password itself. A password hash cannot be used to read your password, and each hash has its own random salt.
If you contact support, we store the email and message you submit. We keep account and event records while your account exists and only as long afterward as needed for fraud prevention, legal obligations, or a support dispute. You can ask us to delete your account from settings or by emailing support.
What the apps do not collect
The Windows and iPhone apps are anonymous. You do not need an email address or a website account to use the free tier. Pairing exchanges encryption keys directly between your devices. Those keys never leave your devices and are never uploaded to PocketDrop.
Every drop is encrypted on the sending device and decrypted on the receiving device. The relay sees ciphertext, its size, and a timestamp, not the text, link, screenshot, or file inside. Relay ciphertext is deleted within 24 hours whether it was delivered or not. We do not use drop contents for advertising, training, analytics, or any other purpose because we cannot read them.
Every drop is end-to-end encrypted with libsodium. The wire protocol is documented in the open in our repo. The apps never ask who you are.
Subscriptions and processors
Apple processes Pocket Pro purchases, free trial offers, renewals, cancellations, and refunds under Apple's privacy terms. The website does not collect payment details or store local subscription records. Our hosting providers may process the limited website data needed to serve pages, maintain the database, send transactional email, and keep the service secure.
Cookies and measurement
The website uses one session cookie after you log in. It keeps you signed in, is HTTP-only, and is not available to page scripts. We do not place advertising cookies, third-party trackers, pixels, or behavioral analytics on the site. Basic server logs may temporarily contain an IP address, browser details, requested path, and time so we can prevent abuse and diagnose failures.
Your choices
You can use the apps anonymously, remain on the free tier, manage Pro in your iPhone settings under Subscriptions, sign out everywhere, change your password, or delete your website account. You may ask for a copy or correction of account information. Depending on where you live, local law may provide additional access, deletion, restriction, or objection rights. We will honor applicable rights and verify requests before changing account data.
Changes and contact
We will update the date above when this policy changes. If a change materially affects how account data is handled, we will give reasonable notice through the site or account email. PocketDrop is not directed to children under 13, and we do not knowingly collect their personal information.
Questions: support@pocketdrop.app