The Core Privacy Guarantee: tdrop is built on strict ephemeral principles. Uploaded files are streamed directly to Cloudflare R2 edge storage and permanently incinerated upon retention expiration (1 hour, 24 hours, or 7 days). We do not require user accounts, passwords, or personal identifiable information.
1. Information We Collect
Because tdrop is authless, we collect only the minimal technical data required to securely process and distribute ephemeral transfers:
- File Data: The binary content and filename you upload. Files are held exclusively for your selected retention window and purged automatically.
- IP Address Hashing: To protect our edge infrastructure from abusive port scanning and brute-force probing, client IP addresses are hashed using HMAC-SHA256 with a private cryptographic salt. We do not store raw IP addresses in plain text.
- Server Logs: Cloudflare edge logs may record HTTP request methods, response status codes, and user-agent strings for security and telemetry diagnostics.
2. Automated Malware Inspection
To ensure developer safety, files uploaded through tdrop are inspected asynchronously using the open-source ClamAV antivirus engine against millions of known malware signatures. If a file is determined to be malicious or infected, it is immediately purged from Cloudflare R2 storage without being distributed.
3. Third-Party Advertising & Google AdSense Disclosures
This website may display advertisements served by Google AdSense and third-party advertising networks. In accordance with Google AdSense policies:
- Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to tdrop and/or other sites on the Internet.
- Users may opt out of personalized advertising by visiting Google Ads Settings or through www.aboutads.info.
4. Analytics & Telemetry
We use Google Analytics (gtag.js) to understand aggregated traffic patterns, regional popularity, and site reliability. Google Analytics collects anonymized interaction data such as browser type, approximate geographic region (country/city), and page views. No uploaded file contents or filenames are ever sent to analytics providers.
5. Data Retention & Permanent Deletion
Files uploaded to tdrop have an immutable expiration timestamp determined at upload time (1 hour, 24 hours, or 7 days). Once this lifecycle completes:
- The object is permanently unlinked and deleted from Cloudflare R2.
- Metadata entries in Cloudflare KV are purged via automatic time-to-live (TTL) expiration.
- Deleted files are cryptographically unrecoverable.
6. Contact & Inquiries
If you have any questions or concerns regarding this Privacy Policy or our security architecture, you may reach out to us directly at:
support@ethiccode.in