Privacy policy

Last updated 4 November 2026

The short version

DropComments keeps what it needs to show your Drops and their comments to the people you share them with, and nothing more. There are no ads, no tracking cookies and no analytics scripts, and your data isn’t sold or shared for advertising.

Who we are

DropComments is run by Awan Ventures, registered in the Netherlands under KVK number 42204858. Awan Ventures decides how your data is used for DropComments and is responsible for it.

In your browser

Before you sign in, your Drops stay in your browser’s storage (IndexedDB) on your device and aren’t sent anywhere. Your browser also keeps your name for commenting, your sign-in session and a few settings, such as whether My Drops is open. DropComments doesn’t use cookies.

When you sign in

You sign in with Google, through Supabase. DropComments receives an account id and your email address, and stores your plan. When you sign in, the Drops in your browser are added to your account.

Drops and comments

Signed in, each Drop is stored on Cloudflare: its files, its name, and its comments and replies, with the name each commenter gave, what they wrote, where it is and, for pages, a small picture of the spot. A reviewer who comments with a name is recognised by a secret their browser keeps. For a private Drop, the email addresses you add are stored so those people can open it. When a signed-in person opens a Drop, the Drop is remembered in their list.

Feedback sent from inside an app with the DropComments SDK is stored the same way, as the id and name the app gives for the person, and each screen it adds keeps where it was made: the page’s address (without anything after a #), its title, the size of the window and the browser’s user agent.

Anyone with a public Drop’s link can see it, including AI tools and other software that fetch it, which get it as Markdown. Private Drops are only shown to their owner and the people signed in with the emails added to them.

Payments

Pro is paid through Stripe. Stripe handles your card details; DropComments stores your Stripe customer id and your subscription’s status, and keeps a record of the billing events Stripe sends.

Who helps run it

Cloudflare (hosting, storage and request handling), Supabase and Google (sign-in) and Stripe (payments) process data for DropComments to provide the service. Cloudflare handles each request’s IP address, which DropComments uses to limit how fast requests come in, and keeps request logs for running and debugging the service.

How long things are kept

On the free plan a Drop is deleted with its files and comments 7 days after it stops taking comments. You can delete a Drop at any time. Pro Drops are kept while your account is active. Drops in your browser stay until you delete them or clear your browser’s data.

Your choices

You can delete any Drop you own from the app. To see what’s stored about you, correct it, delete your account or object to how it’s used, email hello@dropcomments.com.

You can also complain to a data protection authority: in the Netherlands, the Autoriteit Persoonsgegevens, or the one where you live.

Changes

If this policy changes, the new version will be posted here with its date.