← Dropfield

Privacy Policy

Data We Collect

Dropfield collects the minimum data needed to operate the app:

  • Account and profile data (such as email, username, display name, and profile image)
  • Drop content and related activity data (such as stars and flags)
  • Location data used to show and create nearby drops
  • Moderation data (such as reports and report reasons)
  • In-app preferences

Cookies and Browser Storage

Dropfield uses the following client-side storage:

Cookies

  • Authentication cookies to keep you signed in securely
  • Preference cookies to remember certain app settings

Browser storage

  • Local storage may be used for app UI behavior (for example, remembering when informational notices are dismissed)
  • Session storage may be used for temporary performance improvements during an active browser session (for example, short-lived location caching)

Dropfield does not store passwords in browser storage. Sign-in credentials are handled by your selected sign-in provider.

How We Use Data

  • To authenticate users and maintain signed-in sessions
  • To show nearby drops and allow posting, starring, and moderation actions
  • To apply user preferences
  • To operate abuse-prevention and moderation workflows

Database Retention

  • Drops are temporary and are automatically removed after they expire
  • Star relationships are stored while needed for app behavior and are removed as part of related deletion workflows
  • Flag-report records are retained for moderation continuity and are automatically deleted 180 days after the most recent flag on a report
  • Account/profile and preference data are stored while your account is active

Account Deletion and What Is Retained

You can delete your Dropfield account from the in-app menu at any time.

When deletion is processed, Dropfield removes your account and core user-linked product data, including:

  • Your Dropfield account/profile record
  • Drops authored by your account
  • Star relationships tied to your account

For moderation continuity, flag-report records may be retained for up to 180 days from their most recent flag activity. User references in those records are anonymized.

If you sign in again later, a new Dropfield account is created. Previously deleted account data is not restored.

Deleting your Dropfield account does not delete your Apple, Google, or GitHub account. To fully disconnect Dropfield from your provider, revoke access in provider settings:

Data Security

Dropfield uses provider-based authentication (Apple, Google, GitHub) and does not directly manage provider passwords. Drop content is intentionally public to nearby users, so avoid posting sensitive personal information.

Contact

For questions about this privacy policy, please contact us or open an issue on GitHub.