What the website stores
If you create a website account, we store your email address, a salted password hash, and a limited event log. The event log records actions such as signup, login, downloads, and support requests so we can run the service and help when something goes wrong. We never store your password itself. A password hash cannot be used to read your password, and each hash has its own random salt.
If you contact support, we store the email and message you submit. We keep account and event records while your account exists and only as long afterward as needed for fraud prevention, legal obligations, or a support dispute. You can ask us to delete your account from settings or by emailing support.
What the apps and relay store
The Windows and iPhone apps are anonymous. You do not need an email address or a website account to use the free tier. Pairing establishes encryption keys between your devices. Keys are never uploaded in readable form. Encrypted key material may pass through the relay during pairing, but the relay cannot decrypt it.
The relay stores a plaintext filename, item type, size, timestamps, anonymous account and device IDs, device name, APNs token if one has been registered, and plan and RevenueCat state. File and text contents and previews remain end-to-end encrypted. Items expire after 24 hours, and an hourly cleanup removes expired items. We do not use drop contents for advertising, training, analytics, or any other purpose because we cannot read them.
Every drop's contents are end-to-end encrypted with libsodium. The wire protocol is documented in the open in our repo. The apps never ask who you are.
Subscriptions and processors
Pocket Pro purchases are processed through Apple and RevenueCat. Apple handles payment, renewals, cancellations, and refunds under Apple's privacy terms. RevenueCat receives purchase and subscription status tied to an anonymous account ID so PocketDrop can activate or remove Pro access. It does not receive file or text contents, previews, or encryption keys. The website does not collect payment details. Our hosting providers may process the limited website data needed to serve pages, maintain the database, send transactional email, and keep the service secure.
Cookies and measurement
The website uses one session cookie after you log in. It keeps you signed in, is HTTP-only, and is not available to page scripts. We do not place advertising cookies, third-party trackers, pixels, or behavioral analytics on the site. Basic server logs may temporarily contain an IP address, browser details, requested path, and time so we can prevent abuse and diagnose failures.
Your choices
You can use the apps anonymously, remain on the free tier, manage Pro in your iPhone settings under Subscriptions, sign out everywhere, change your password, or delete your website account. You may ask for a copy or correction of account information. Depending on where you live, local law may provide additional access, deletion, restriction, or objection rights. We will honor applicable rights and verify requests before changing account data.
Changes and contact
We will update the date above when this policy changes. If a change materially affects how account data is handled, we will give reasonable notice through the site or account email. PocketDrop is not directed to children under 13, and we do not knowingly collect their personal information.
Questions: support@pocketdrop.app