Privacy Policy

We collect and store the minimum information needed to provide the service: your email address (from Clerk authentication), file metadata (names, sizes, types, upload dates), and the files you choose to upload. We do not collect browsing history, analytics data, or any personal information beyond what you explicitly provide.

Your email address is used solely for authentication and to send you notifications you request (such as file download emails). File metadata powers your dashboard — folders, search, previews, share links, and usage statistics. Your files are stored as-is and served back to you or your share recipients on demand.

All uploaded files are stored on IDrive e2, an S3-compatible object storage provider. Files are encrypted in transit and at rest. We generate temporary presigned URLs to allow your browser to upload and download files directly to/from IDrive e2 — we never proxy file data through our servers during transfer.

User authentication is handled entirely by Clerk. We never see or store your password. Clerk provides us with a user identifier and email address after successful authentication. For more details, see Clerk's privacy policy at https://clerk.com/privacy.

When you share a file via email, we send the message through Resend. Resend receives the recipient's email address and the content of your message. We track delivery status (sent, delivered, opened, bounced) to show you real-time updates in your dashboard. For more details, see Resend's privacy policy at resend.com/legal/privacy-policy.

We use Clerk (authentication), MongoDB (database), IDrive e2 (file storage), and Resend (email delivery). Each service processes data only as necessary to provide its function. We do not sell, rent, or share your data with any third parties for their own purposes.

Downloads and previews are served directly from IDrive e2 via presigned URLs. Files are streamed directly from storage to the recipient — no intermediate servers.

Files are retained until you delete them. Share links are purged once they expire. Email logs are retained until you manually delete them from your dashboard.

When you delete your account, all your files are removed from storage, all share links are deleted, and all file metadata is removed from our database.

We use essential cookies required for authentication (Clerk session tokens) and a minimal admin session cookie if applicable. No tracking, analytics, or marketing cookies are used. You can block all cookies via browser settings, but authentication will not work.

You can download, delete, or export your files at any time from your dashboard. To delete your account entirely, click "Delete account" in your dashboard settings. If you need help, contact us at [email protected].

We may update this policy from time to time. Significant changes will be communicated via email or a notice on the dashboard. Continued use of FileDrop after changes constitutes acceptance of the updated policy.