In short
- No account, no email address, no phone number.
- No transfer server: your files go straight from one device to another, encrypted.
- No ads, no analytics, no trackers, neither in the app nor on this website.
Who is responsible
Droplet Drop and the drop.dropletmesh.app website are published by Droplet. For any question about your data: contact@dropletmesh.app.
What stays on your device
This information is created and kept on your device only; we have no access to it:
- the device name, which you can change;
- the device key, on which its identity rests;
- the history of your transfers;
- your list of trusted devices, and your settings;
- the pieces of an interrupted transfer, until it resumes.
On a phone, uninstalling the app erases all of this; on a computer, delete its data folder. Received files stay in your receiving folder.
What devices on your network see
To be found, an open Droplet Drop announces on the local network (and only there) the device name, its platform, its identity code, the protocol version and the port it receives on. This information doesn’t leave the network.
The QR code and address on the Receive screen hold the same information, plus the device’s address on the local network. A Group Drop invitation also holds the distribution’s name, its expiry date and the token that lets people join. You choose who you share them with.
Files, their names and sizes are sent only to the receiving device, and only encrypted.
Permissions
- Local network: to find nearby devices and exchange files.
- Camera: only to scan a QR code, when you ask to. No image is stored.
- Photos and files: only the ones you choose to send, and the folder where the ones you accept arrive.
This website
drop.dropletmesh.app sets no cookies and uses no analytics. It is hosted by Vercel, which technically processes visitors’ IP addresses to serve the pages and protect the site from abuse.
The site recognizes your system (Windows, Mac…) in your browser, to offer the right download; nothing is sent.
A Group Drop invitation opened on this site stays in your browser: the part of the address after “#” is never sent to the server.
The apps are downloaded from GitHub, which applies its own privacy policy.
Your rights
Since we hold no data about you, there is nothing to access, correct or delete on our side: everything is on your device, and you stay in control. For any question, write to us at contact@dropletmesh.app. You can also contact your country’s data protection authority at any time.
Changes
If this policy changes, the new version will be published here, with its update date.