Privacy policy

Who we are

SecretDrop is operated by Agdir Drift AS, a company registered in Norway. As a company in the European Economic Area, we are subject to the General Data Protection Regulation (GDPR). Agdir Drift AS is the data controller for the personal data described in this policy. SecretDrop's servers are located in Germany, within the EU — your secret is stored and processed inside European jurisdiction until it is read or expires. The storage engine powering SecretDrop is Sirr.

What we collect

Google Analytics. We use Google Analytics 4 to understand how people move through the product. Google Analytics places cookies in your browser (_ga, _ga_*) and sends usage data to Google's servers. The events we track are: secret created (with metadata — number of allowed reads, expiry duration, character count — never the secret value itself), link copied, secret revealed, secret copied, secret downloaded, AI-prompt copied, and footer/interstitial clicks. We do not track individual users across sessions for profiling or advertising.

Server logs. Our web server records standard HTTP logs: IP address, timestamp, URL path, and HTTP status. These are retained briefly for security and debugging and are not shared with third parties.

What we do not collect

We do not collect the content of your secrets. Secrets are encrypted at rest with ChaCha20-Poly1305. When a secret is read or expires, its ciphertext is immediately and permanently zeroed — the content is unrecoverable from that point, including by us. A metadata tombstone (containing only the hash and burn timestamp, no content) is retained briefly to prevent replay attacks, then purged. We do not collect your name, email address, or any identity information. We do not attach analytics events to the secret reveal flow in a way that captures or reflects the secret value.

Legal basis (GDPR)

We rely on legitimate interest (Article 6(1)(f) GDPR) for Google Analytics, Google Fonts, and server logs — specifically, our interest in operating the service, diagnosing problems, and understanding product usage at an aggregate level. We note that Norway's data protection authority (Datatilsynet) has issued guidance indicating that Google Analytics may require explicit user consent. We are implementing an opt-out control as priority follow-on work; if you wish to opt out now, see below.

Opting out of analytics

You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on (available at tools.google.com/dlpage/gaoptout), or by enabling your browser's privacy settings or a content blocker. Opting out has no effect on the service — SecretDrop works identically with or without analytics active.

Data processors

We use Google LLC as a data processor for Google Analytics. Data may be transferred to and processed in the United States. Google's privacy policy governs that processing (google.com/privacy).

Retention

Google Analytics data is retained for 14 months (Google's default). Server logs are retained for up to 30 days. Secret content is deleted immediately on read or expiry and cannot be retrieved afterward.

Your rights

Under GDPR you have the right to access, rectify, erase, object to, and request portability of your personal data. You may also lodge a complaint with Datatilsynet, Norway's data protection authority (datatilsynet.no). Because we collect no identity information, most of these rights apply only to the analytics data held by Google.

Contact

Agdir Drift AS · [email protected] · agdir.no