Operator note: this policy describes how the VaultDrop software handles data. Whoever operates a VaultDrop deployment is the data controller and should have it reviewed by counsel and completed with their legal entity, address and jurisdiction before publishing.
The short version
- We cannot read your secrets. They are encrypted in your browser; we store only ciphertext.
- We collect the minimum metadata needed to run the service and keep it for limited periods.
- We do not use advertising, third-party analytics or tracking pixels.
- We do not sell personal data.
What we process
Secrets
Encrypted payloads, a random identifier, timestamps, view counts, a size bucket, a one-way verifier and KDF parameters. The encrypted payload is deleted as soon as the secret is opened (final view), expires or is destroyed. Metadata of anonymous secrets is deleted 24 hours after that; metadata of account holders' secrets after 30 days.
Accounts (optional)
Name, email address, a password hash (Argon2id), passkey public keys, two-factor configuration, session records (including IP address and browser user-agent, shown to you on your Security page), API key hashes, webhook configuration, notifications, subscription status and metadata-only audit events.
Requests
IP addresses are used transiently for rate limiting and abuse prevention; VaultDrop stores them only as keyed pseudonyms that expire with the rate-limit window. Server logs record request paths with secret identifiers removed, status codes and timing; they never include secret content, keys or tokens.
Payments
Payments are processed by Stripe. We receive subscription status and a customer identifier, never full card details.
Your rights
You can view and update your profile, revoke sessions and API keys, and delete your account at any time from the dashboard. Account deletion removes your account, active secrets and related records; residual copies in encrypted backups expire according to the backup retention schedule.
Contact
Questions about privacy: contact@vante.app.