Privacy policy
What we collect, why, and for how long.
1. What we collect
For a seller: their email address, the name and settings of their shop, and the content they upload. If they sign in with Google: the identifier and email address of their Google account; Google also sends their name and profile picture, which DropLink neither displays nor uses. For a recipient: nothing that identifies them, unless they themselves ask to be notified by email — their address is then used only for the tracking emails of that order. Viewing a page records a salted fingerprint of the IP address and browser, never the values themselves.
2. The recipient has no account
Viewing a page creates no account, requires no address and installs no advertising tracker. The name shown on the page is free text entered by the seller: it designates no user of our service.
3. Nothing is indexed
Order pages carry a no-index directive, appear in no gallery and are reachable through no internal search. No rich preview is produced for messaging apps: a preview would show the content to people who never open the link.
4. For how long
An order's content is kept for as long as the seller keeps it. Raw carrier responses are purged ninety days after the parcel's last movement. A tracking email address is used only after its owner confirms it, for three emails at most (shipped, in transit, delivered), and every email offers one-click unsubscribe; an unconfirmed request is erased after twenty-four hours. Administration records are retained and survive the deletion of the account concerned.
When an account is deleted, only the email address and the sign-up and deletion dates are kept for one year, to meet hosting obligations, then erased automatically.
5. Your rights
Access, rectification, erasure, objection. Write to us at the contact address shown on the reporting page.