Privacy Policy ⏤ Drippa

We're a small team and we'd rather collect less data than more. This page explains what we do collect, why, and how you can control it.

What we collect

Account info — email and (if you provide it) display name and profile image. Auth is handled by Clerk; they store the credentials, we just store an ID that links to your session.
Content you upload — drip images, banners, and design data. Stored in Cloudflare R2 and our database.
Usage events — when a visitor views, shares, downloads from, or clicks a CTA on one of your drips, we count it. The counts are aggregated to per-drip-per-day totals. We do not use third-party advertising cookies.
Payment info — handled by our payment provider. We see the last 4 digits of the card and the status of each charge; we don't store full card numbers.

What we don't collect

Cross-site tracking cookies.
Visitor IP addresses for analytics purposes.
Anything from third-party advertising networks.

Why we use it

To deliver your drips to your audience and keep the service running.
To show you analytics (views, shares, downloads, CTA clicks) for the drips you create.
To bill you for paid features.
To respond when you contact support.

We don't sell your data and we don't share it with advertisers.

Who we share with

We share data only with vendors required to run the service:

Clerk (authentication)
Cloudflare R2 (image / file storage)
Neon (database hosting)
Our payment processor (billing)
Umami (privacy-first product analytics, no personal data)

Each of these providers has access only to the minimum data needed to perform their function, and each is bound by their own data-processing terms.

Cookies

We use a session cookie to keep you signed in, and a cookie to remember a drip you've unlocked with a password. We don't use any third-party advertising or tracking cookies.

Your rights

You can:

Access or export the drips, images, and analytics tied to your account from your dashboard.
Delete a drip at any time — its image and database row are removed, and analytics totals associated with it are retained only in aggregated form.
Close your account — we'll delete your profile and content within 30 days, except where retention is required by law (e.g., billing records).
Contact us at hello@drippa.xyz for any data request, including correction or deletion.

Children

Drippa is not intended for users under 13 (or the equivalent minimum age in your country). We don't knowingly collect data from children.

Changes

If we change this policy in a way that affects how your data is used, we'll email account holders and post a notice in-app before the change takes effect.

Contact

Questions about this policy? Email us at hello@drippa.xyz.