Privacy & Cookies

Scope

This notice covers dropprivacy.com — our public marketing site and the authenticated customer portal. It does not cover consumer personal data our customers (registered data brokers) process through the Drop Privacy engine; that data is governed by each customer's own agreement and never leaves their systems in identifiable form. See Security for how the engine keeps consumer PII out of our custody.

What we collect on this site

• Demo requests. When you submit the contact form, we receive the name, work email, company, role, and message you enter, and email them to our sales team so we can respond. We use them only to reply to you.
• Portal accounts. If you log in, we process the account details needed to operate the service (e.g. your name, email, role, and activity for security auditing).
• Usage analytics. With your consent, we collect privacy-friendly usage analytics (see below).

Cookies & analytics

We use Google Analytics 4 (GA4) to understand how visitors find and use the site — for example, which pages are viewed and whether a visit results in a demo request — so we can improve it. GA4 sets cookies on your device and sends usage data (such as pages viewed, approximate location derived from IP, device/browser type, and referral source) to Google, which acts as our data processor. We do not use this data to identify you personally, and we do not sell it.

You are in control:

• Consent first. On your first visit we show a banner. Analytics cookies are set and data is sent to Google only after you choose “Accept”. If you decline, no analytics cookies are set and nothing is sent.
• Global Privacy Control / Do Not Track. If your browser sends a GPC or Do-Not-Track signal, we treat it as a decline automatically — no banner interaction needed.
• Change your mind. Clear this site's cookies in your browser to be asked again, or use a browser/extension that blocks analytics. You can also install Google's opt-out add-on.

Strictly-necessary cookies (for example, your login session and the CSRF security token) are always set because the site cannot function without them; these are not used for analytics.

How we share information

We share information only with service providers that help us run the site — currently Google (analytics) and our email provider (to deliver your demo-request message) — and where required by law. We do not sell your personal information.

Retention

Demo-request emails are kept as long as needed to follow up and for our records. Analytics data is retained according to Google Analytics' configured retention period. Portal account and audit data are retained for the life of the account and as required for compliance.

Your rights

Depending on where you live (for example under the CCPA/CPRA or GDPR), you may have the right to access, correct, or delete the personal information we hold about you, and to opt out of analytics. To exercise a right, contact us below.

Contact

Questions about this notice or your information? Email sales@dropprivacy.com.

This notice describes our current practices for this website and may be updated; the “last updated” date above reflects the latest change.