Privacy Policy

What DropWeb does

DropWeb is a static site hosting API. You upload a zip or tar.gz archive and receive a live URL on a *.dropweb.app subdomain. The service is designed for quick deploys and showcases — not long-term hosting.

What we collect

• IP address — used for rate limiting. Not stored long-term.
• User-Agent — logged for abuse detection.
• Email address — only if you choose to confirm one. Used for account upgrades and key recovery.
• Uploaded files — the static site files you deploy. Stored on disk and served publicly at your site's subdomain.

We do not use cookies, tracking pixels, or analytics scripts.

Data retention

• Anonymous sites — automatically deleted after 7 days.
• Free tier sites — automatically deleted after 30 days. Renewable on redeploy.
• Account data — retained while you have active sites. Accounts with no sites are subject to cleanup.
• API keys — stored as hashed values only. We never store your plaintext key.

No data sharing

We do not sell, share, or transfer your data to third parties. Your uploaded files are served publicly at the subdomain URL — this is the intended behavior of the service.

Abuse reporting

To report abuse, illegal content, or copyright violations:

• Email [email protected] with the site URL and description of the issue.

Takedown policy

DropWeb has zero tolerance for illegal content, malware, phishing, or abuse. Reports are reviewed promptly and offending sites are taken down immediately. Repeat offenders are blocked by IP.

This is a service for quick deploys and showcases. It is not intended for hosting permanent or sensitive content.

Contact

For privacy questions or data deletion requests, email [email protected].