Privacy Policy

Dropfile is designed so file bytes transfer directly between participating browsers. The service does not intentionally retain a permanent cloud copy of the shared file. A recipient's browser may temporarily store pieces on that recipient's own device so large downloads can finish safely.

The service processes temporary share identifiers, file name and size metadata, expiration settings, cryptographic proofs, connection signals, session status, and progress information required to connect participating browsers. Operational infrastructure may also process IP addresses, request headers, security events, and diagnostic logs. Dropfile converts network addresses into one-way identifiers for short-lived abuse-prevention counters; those counters automatically expire after their rate-limit window.

The sender's password is used in the browser to derive a proof. The service is designed not to store the plain password. Downloaders must also pass Cloudflare Turnstile, which processes browser and network signals under Cloudflare's own privacy terms.

Your light or dark theme choice is stored locally in your browser. Dropfile may also use temporary browser storage to stage a download on devices that cannot stream a large file directly to a chosen save location.

Temporary share and signaling records are intended to expire after the sharing window or shortly afterward. Hosting, security, and network providers may retain operational logs according to their own policies and legal obligations.

Do not select or download a file if you do not want the participating devices and necessary service providers to process the information described above. You can clear the saved theme preference through your browser's site-data controls.