Privacy

We give your browser a random ID so you can vote once per listing. We also store a one-way hash of your network address with each vote so clearing cookies can't bypass that limit from the same connection. We count anonymous views and click-throughs to rank what's trending. If you submit a URL, we tie that submission to the same ID. We don't know who you are.

• Device cookie. When you vote, submit a build, or open a listing, we set an httpOnly cookie with a random ID (signed on our server). It lasts up to two years. We use it to enforce one vote per listing, cap submissions, and link anonymous activity together.
• Hashed network ID (votes only). When you vote, we store a one-way hash derived from your IP address — not the address itself — so one network can't vote twice on the same listing by clearing cookies. People on the same Wi‑Fi share one vote per listing.
• Activity on our server. We store which listings you voted for, viewed, or clicked through to — always keyed to that random ID, never to your name or email. Submitted URLs are stored the same way.
• Display preferences. Dark/light theme and card layout live in your browser's local storage. They never leave your device unless you clear them.
• Standard server logs. Our host (Vercel) may log IP addresses, browser type, and request paths for security and reliability. We don't use those logs to profile visitors.

No accounts, passwords (for regular visitors), email addresses, payment info, or precise location. We don't run Google Analytics, Meta Pixel, or similar tracking. We don't sell your data or share it for advertising.

Some listings play a demo video inline via YouTube's privacy-enhanced embed (youtube-nocookie.com). YouTube may set its own cookies if you press play. That's between you and Google — see Google's privacy policy.

Voting needs a stable anonymous ID so one person can't spam votes. Trending needs rough engagement counts. The submission queue needs per-device limits so the crawler isn't flooded. That's the whole list.

Votes, views, click-throughs, and submissions stay in our database until we delete them — there's no automatic expiry today. The device cookie expires after two years unless you clear it sooner.

• Clear Dropday's cookies or site data in your browser settings to remove the anonymous ID we assigned you on that device.
• Email us at privacy@dropday.ai to ask what we have linked to your device or to request deletion. If you can, say roughly when you visited and what you did (e.g. "I submitted this URL yesterday") — we'll do our best to find and remove it.

If you're in the EU, UK, or California, you may have additional rights to access or delete personal data. We'll honor reasonable requests either way.

The site runs on Vercel; the database is hosted Postgres (e.g. Neon or Vercel Postgres in production). Data may be stored in the United States. We use these providers only to run the site.

We may update this page as the site evolves. The date at the top shows when it last changed. Continued use after an update means you accept the revised policy.

Questions about privacy? Email privacy@dropday.ai.