Français
中文DropLink processes two kinds of data: data about the seller who has an account, and data about that seller's customers, who view an order page without ever having an account. This page explains which data, why, for how long, and the rights you have.
01Data controller
The controller of the processing described here is Mahfoud SEDDIKI, sole trader (entrepreneur individuel), 2 square de l'Avre, 92100 Boulogne-Billancourt, France (SIREN 990 848 004). For any question or request about your data: contact@droplink.fr.
02Data collected
Seller data
| Data | Source |
|---|---|
| Email address and password (stored as a hash, never in plain text) | Entered by the seller |
| Identifier and address of the Google account when signing in with Google; Google also sends the name and photo, kept by our sign-in provider but neither displayed nor used | |
| Display name, name, description, logo, color and social links of the shop | Entered by the seller |
| Orders, photos, videos, tracking numbers and internal notes | Entered by the seller |
| Plan, status and dates of the Pro subscription | Sent by Lemon Squeezy |
| Active sessions, trusted devices, a hashed fingerprint of the IP address to limit abuse | Collected automatically |
| IP address and browser of each sign-in, logged by our sign-in provider | Collected automatically |
Data of the seller's customers
| Data | Purpose |
|---|---|
| Name or nickname, entered by the seller | Identify the order on its page |
| Tracking number and carrier, entered by the seller | Show the parcel's journey |
| Photos and videos of the order, uploaded by the seller | Show the order before it ships |
| Approval or rejection of the photos, and any comment, given by the customer | Passed on to the seller |
| Email address, given and confirmed by the customer themselves (optional) | Three tracking emails at most — shipped, in transit, delivered — with one-click unsubscribe |
| Hashed fingerprint of the IP address and browser, and country, on each visit | Count views and limit abuse, without ever keeping the IP address itself |
An order page can be viewed by anyone who has its link. That is why these pages are not indexed by search engines, appear in no search results and produce no preview in messaging apps.
What DropLink does not collect
- No card data: the subscription is collected by Lemon Squeezy, which sends us neither the card number nor its last digits.
- No postal address: DropLink ships nothing.
- No price, order amount or seller revenue.
- No advertising cookie and no third-party tracker.
03Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Create and manage the account, provide order pages and parcel tracking | Performance of the contract |
| Manage the Pro subscription | Performance of the contract |
| Keep the email address and dates after an account is deleted | Legal obligation of the host |
| Handle reports of content | Legal obligation of the host |
| Secure the service: limit abuse, check that a password has not leaked, recognize trusted devices, log administration access | Legitimate interest: protecting the service and its users |
| Count the views of an order page for the seller | Legitimate interest: informing the seller |
| Measure use of the service in pseudonymous form | Legitimate interest: improving the product |
| Spot duplicate accounts showing the same social links | Legitimate interest: enforcing the limits of the free plan |
| Send tracking emails to the seller's customer | Consent, confirmed by email and withdrawable at any time |
DropLink sends no marketing offers and makes no automated decision producing legal effects concerning you.
04Recipients and processors
Data is never sold, rented or shared for advertising. It is passed only to the providers the service needs:
| Provider | Role | Location |
|---|---|---|
| Supabase | Database and account sign-in | European Union (Paris) |
| Railway | Application hosting | Servers in the European Union; company based in the United States |
| Cloudflare | Storage of photos and videos, network, receipt of contact emails | Company based in the United States |
| Resend | Sending emails | Sent from the European Union; company based in the United States |
| PostHog | Pseudonymous usage measurement | European Union |
| Sentry | Technical error reports, without IP addresses or sign-in tokens | Company based in the United States |
| 17TRACK | Parcel tracking: receives only the tracking number and the carrier | Outside the European Union |
| Sign in with Google, if the seller chooses it | European Union and United States | |
| Lemon Squeezy | Collection of the Pro subscription, as a reseller responsible for its own processing | Company based in the United States |
05Retention periods
| Data | Period |
|---|---|
| Seller account | For as long as the account exists |
| Email address and sign-up and deletion dates, after the account is deleted | One year, then automatic erasure |
| Orders, photos and videos | Until the seller deletes them, or with the account |
| Raw carrier responses | Ninety days after the parcel's last movement |
| Unconfirmed tracking email request | Twenty-four hours |
| Confirmed tracking email address | Until the customer unsubscribes or the order is deleted |
| Order page views (fingerprints, country) | Thirteen months |
| Archives of subscription events, without name, email or card | Three years |
| Log of administration access | Kept for the security of the service and the defense of our rights; it cannot be modified and survives the deletion of the account concerned |
06Transfers outside the European Union
When data is processed by a provider established outside the European Union, the transfer is covered by the European Commission's standard contractual clauses or, for providers that have joined it, by the EU–US Data Privacy Framework. 17TRACK receives no data identifying anyone by name: only the tracking number and the carrier.
07Cookies
DropLink uses only cookies strictly necessary for it to work, which require no consent. A visitor who is not signed in receives, at most, the language cookie.
| Cookie | Role | Duration |
|---|---|---|
| Session cookies | Keep you signed in | Until sign-out, at most four hundred days |
| NEXT_LOCALE | Remember the chosen language | For the browser session |
| dl_appareil | Recognize a trusted device for two-factor authentication | Thirty days |
No advertising cookie, no audience measurement cookie and no third-party tracker is set.
08Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, the right to withdraw your consent at any time, and the right to set instructions for what happens to your data after your death.
- Sellers: the settings let you edit your information, download your data and delete your account.
- A seller's customers: every tracking email contains an unsubscribe link. For information a seller has entered about you, contact the seller first; you can also write to us and we will pass it on.
- By email: contact@droplink.fr. You will receive a reply within one month.
09Security
- Encrypted HTTPS connections across the whole service.
- Passwords stored as hashes, never in plain text, and checked against known leaks without ever being sent.
- Each seller's data is isolated in the database: an account can read only its own orders.
- Photos and videos stored in a private space, served through signed links with a limited lifetime.
- Two-factor authentication available to sellers and mandatory for administration, where every view of an account is logged.
In the event of a data breach likely to put the people concerned at risk, the CNIL is notified within seventy-two hours and the people concerned are informed.
10Contact and complaints
For any question about your data: contact@droplink.fr, or by post to Mahfoud SEDDIKI, 2 square de l'Avre, 92100 Boulogne-Billancourt.
If you are not satisfied with the reply, you can lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris, or at cnil.fr.
Use the dedicated form: every report is reviewed.
Report content