Loading...
Effective date: March 2026
When you create a Droppr account, we collect your email address and name. When visitors sign up to your waitlists via the Droppr widget, we collect their email address and any custom fields you configure. We also collect standard usage data (pages visited, actions taken, timestamps) to operate and improve the service.
We use the information we collect to provide and operate the Droppr service, authenticate your account, send transactional emails (e.g. waitlist confirmations), and send occasional product updates. We do not sell your data to third parties.
Your data is stored in a PostgreSQL database hosted in the EU (Frankfurt, Germany). We apply industry-standard security measures including encryption at rest and in transit. Backups are retained for 30 days.
Droppr uses a single session cookie for authentication purposes. This cookie is HttpOnly, Secure, and expires when you log out or after a period of inactivity. We do not use advertising or tracking cookies.
We use Upstash Redis for rate limiting API requests. Upstash processes minimal request metadata (IP address, timestamp) and does not receive personal data beyond what is strictly necessary for rate limiting. Please refer to Upstash's Privacy Policy for details.
You have the right to access, correct, and delete your personal data at any time. To exercise these rights, contact us at hello@iapplabs.com. We will respond within 30 days.
If you have any questions about this Privacy Policy, please contact us at hello@iapplabs.com.