Privacy Policy
Version 2026-10-12. Effective from that date.
This explains what the Dropstall team (“we”) collects when you use Dropstall, why, who else handles it, and what you can ask us to do with it. It goes with our Terms of Service. We collect only what running the marketplace needs, and we do not sell your data.
What we collect
- Your account: name, email address, and your password, stored only as a salted hash we cannot read. We also record when you agreed to the Terms and which version.
- If you sell: your shop's name, address and description, your products and files, and the payout details you give us (for example a PayPal address or bank account), which only you and our admins can see.
- Purchases: what was bought, when, the amount and currency, and how often it was downloaded. Card details go straight to our payment provider; we never see or store them.
- Reviews you write, which are public with your name.
- Your country, from your connection, and your browser's language, to show prices in your currency. We do not store these.
Cookies
Two cookies, both needed for the site to work: one keeps you signed in, and one remembers the currency you chose. We use no advertising or tracking cookies.
Why we use it
To run your account, deliver what you buy, pay sellers, prevent fraud and abuse, answer you, and meet legal and tax duties. We use it on the basis of our contract with you, our legitimate interest in a safe marketplace, and legal obligations.
Who else handles it
- Vercel hosts the site; Supabase stores the database and uploaded files (United States).
- Vercel also measures page views anonymously.
- Stripe processes payments, under its own privacy policy.
- Sentry receives error reports when something breaks. We send it no names, emails, form contents or cookies.
- An email provider sends receipts and account emails, when email is turned on.
They act on our instructions. Sellers see the name of each person who buys from them, never their email or payment details. Admins see sellers' email and payout details to send payouts.
How long we keep it
For as long as your account is open. Records of sales and payouts are kept as long as tax and accounting law requires, usually several years, even after an account is closed.
Your choices and rights
You can ask us to show you, correct, export or delete your data, or object to how we use it, by writing to hello@dropstall.com. Depending on where you live (for example the EU, UK or California) you have these rights by law, and you can complain to your data protection authority. We will answer within a month.
Age
Dropstall is for people aged 18 and over. We do not knowingly collect data from anyone younger; if you believe we have, write to us and we will delete it.
Changes and contact
The version and date are at the top of this page; if a change matters we will tell you. Questions or requests: hello@dropstall.com.