Privacy
Your files stay on your device
The current tools process media locally. Processing packages may be downloaded from external providers. File names, images, audio, videos and captions are not sent by our analytics integration.
Accounts and saved presets
If you create an account, Supabase stores authentication data, your email address, optional display name, plan and saved settings. Presets, Pro Creator Profiles and Workflow Recipes contain reusable settings only, not your media files. Pro preset backups are downloaded locally; restoring a backup sends only preset settings back to your account. Workflow Recent Runs are optional local browser history containing recipe settings, time and aggregate counts; they do not include filenames or media.
Account and sign-in services
Droop uses Supabase for authentication and account data. Optional Google sign-in shares the basic account information approved in the Google consent flow. Browser clients use a public publishable key with Row Level Security; administrative credentials are not included in the public site.
Account email delivery
Droop uses Resend as the SMTP provider for account emails such as confirmation and password recovery. Resend receives the recipient address, message content and ordinary delivery metadata needed to send those emails.
Bot and abuse protection
Droop uses Cloudflare Turnstile on selected authentication flows. Cloudflare receives browser and network information needed to evaluate whether a request is likely to come from a person or an automated system.
Pro billing
When paid Droop Pro checkout is enabled, PayPal processes recurring payments. PayPal receives the payment and account information needed to complete the transaction. Droop stores subscription identifiers and status needed to grant Pro access, but does not receive or store your full card number.
Usage measurement
When enabled, we use Umami to measure page visits and selected processing events. We send the tool name, interface language and referring website origin. Search text, URL parameters and referring page paths are excluded. The analytics provider receives ordinary network information such as IP address and browser headers. A download click does not tell us whether the file was saved.
This choice is saved in this browser. Do Not Track and Global Privacy Control are also respected. Your media tools work either way.