Privacy Policy
Version 2.0 · Effective 2 August 2026
This explains what SealedDrop collects, what it cannot collect, and what you can ask us to do. It covers sealeddrop.com and the download pages. Questions or requests: support@sealeddrop.com.
1. The short version
We built this so that we hold as little about you as possible. Your files are encrypted in your browser before they reach us, and the key never does — so your file contents and filenames are not merely private from other customers, they are unreadable to us.
We do not sell your data. We do not run advertising. We do not use it to train artificial intelligence. There are no trackers or analytics scripts anywhere on this site.
2. What we collect
If you have an account:
| What | Why | How long |
|---|---|---|
| Your email address | To sign you in and to contact you about your account | While your account exists |
| A display name you choose | Shown to your recipients so they know who sent a file. Stored in plain text — do not put anything confidential in it. | While your account exists |
| Billing records | To take payment and meet tax and accounting duties | As tax law requires, typically seven years |
| Transfer records — size, timestamps, status, and a one-way hash of the link | To run the service, enforce your plan's limits, and show your history | Removed 30 days after a transfer ends |
| An encrypted description of each file | So your recipient's browser knows the filename. We cannot decrypt this. | Deleted with the transfer |
| Basic operational logs | To keep the service working and secure | 30 days |
What we never have: your file contents, your filenames in readable form, and the decryption keys. These are not things we choose not to look at. They are things we do not possess.
3. If you received a file
This section is for people who were sent a link and have no account with us.
- We do not create an account for you, and we do not ask for your name or email.
- Your IP address is used only to enforce rate limits so nobody can probe for valid links. It sits in a counter that expires within two hours. We do not write it to our logs when you open a link or download a file — the only time it reaches a log line is if your requests were refused for exceeding a limit.
- Your IP address is never shared with the sender. They can see that their file was collected and when, because that is the point of the product, but not who you are.
- The download page contains no trackers, analytics, or third-party code of any kind.
- We cannot see the file you downloaded. It is decrypted in your browser using the key in the link, which never reaches us.
You can ask us what we hold about you, and ask us to delete it, at support@sealeddrop.com. Usually the honest answer is that we hold nothing, because the rate-limiting counter has already expired.
4. Cookies
We use one cookie, to keep you signed in. There are no advertising cookies, no analytics cookies, and no third-party cookies. Because we do not track anyone across sites, "Do Not Track" signals do not change what we do — there is nothing to switch off.
5. Who else touches your data
We keep this list short on purpose:
- Amazon Web Services — hosting, storage, and sending our sign-in emails. Holds encrypted files it cannot read, plus the records above.
- Stripe — payments. Your card details go to Stripe, never to us.
- Fastmail — our own business email, so anything you email us.
That is the entire list. We do not share your information with anyone else except where the law requires it, and we do not sell it to anybody, ever.
6. Legal requests
If we receive a valid legal demand, we may have to produce what we hold: your account details, transfer records, and encrypted data we cannot decrypt. We cannot produce file contents or filenames, because we do not have them in any readable form. Anything already deleted is genuinely gone and cannot be retrieved by us or by anyone else.
7. Security
Files are encrypted in your browser with AES-256 before upload. Encrypted data is stored without versioning, without replication, and without backups, so deletion is final. Our storage configuration is checked automatically every day and the result is published on our trust page, pass or fail.
If you find a security problem, please tell us at security@sealeddrop.com.
8. Your choices
You can:
- See and change your account details from your dashboard.
- Delete a transfer at any time from your dashboard while it is live.
- Close your account by emailing support@sealeddrop.com. We delete your account data, keeping only the billing records tax law requires us to keep.
- Ask what we hold about you, and ask for a copy or for deletion, at support@sealeddrop.com. We will respond within 30 days.
Depending on where you live you may have additional rights over your personal information. Ask us and we will honour them — we would rather apply the same standard to everyone than sort people by state.
9. Children
SealedDrop is not for children under 13, and we do not knowingly collect their information. If you believe a child has given us personal information, email support@sealeddrop.com and we will delete it.
10. Changes to this policy
We may update this policy as the service changes. If a change is material we will email active subscribers before it takes effect. Every version carries a number and an effective date.
Questions or requests: support@sealeddrop.com