Privacy Policy

Information We Collect

We collect only the minimal data required to provide the service:

• Session IDs generated when you create a transfer session (no account or login required)
• Files and text you choose to send (stored temporarily on Cloudflare R2)
• After optional analytics consent, first-party metrics record campaign labels, temporary visit identifiers, secret-keyed hashes for session and file metrics, operation results, file size ranges, and error categories. Microsoft Clarity interaction analytics is also enabled. First-party metrics do not store filenames, contents, text messages, IP addresses, full URLs, or usable session links.
• Language preference stored in your browser's local storage

Data Retention

All session data, including uploaded files and text messages, is automatically and permanently deleted after 7 days. We do not retain any personal information beyond this period. First-party usage metrics use a 30-day reporting window; records older than 30 days are deleted by the daily cleanup job. Browser visit identifiers expire after 30 minutes and are stored only in the current tab’s session storage. Aggregate reports are restricted to administrators.

Cookies

Language and consent choices are stored in your browser's local storage. Microsoft Clarity analytics loads only after you accept optional cookies. Google AdSense may use cookies or similar technologies when advertising is enabled; consent requirements depend on your region. First-party funnel analytics also requires consent. Declining or withdrawing consent stops subsequent first-party reporting from that browser and clears its visit identifier without affecting transfers.

Advertising (Google AdSense)

We use Google AdSense to display advertisements on this site. Google AdSense may use cookies and web beacons to serve ads based on your prior visits to this and other websites. These ads help us keep WebDrop free for everyone.

Where required, we use a Google-certified consent platform so you can choose personalized ads, non-personalized ads, or decline optional purposes. You can also manage personalized advertising in Google's Ads Settings.

Third-Party Services

WebDrop uses Cloudflare for hosting, security, storage, and database services; Microsoft Clarity for consent-based usage analytics; and Google AdSense for advertising when enabled. These providers may process IP addresses, request metadata, device information, cookies, or similar identifiers under their own privacy terms.

Provider privacy information:

• Cloudflare Privacy Policy
• Microsoft Privacy Statement
• How Google uses information from partner sites

Your Rights

You have full control over your data:

• Sessions and their content are automatically deleted after 7 days
• You can stop using the service at any time — no account means no data tied to you
• Contact us at any time to ask about your data or request early deletion

Contact Us

If you have any questions or concerns about this Privacy Policy, please reach out: