Privacy Policy

This Privacy Policy explains how timedrop.it collects, uses, and protects information when you use timedrop.it and related services. It is written for users in the United States. By using the Service you agree to the practices described here.

1. Who we are

timedrop.it provides encrypted digital time capsules that are delivered to a recipient on a future date you choose. For privacy questions you can reach us at info@timedrop.it.

2. Information we collect

Account data: your email address and basic authentication data from Apple or Google. Sending a capsule requires an account.

Capsule metadata: the recipient email, the unlock date, and whether a capsule is private or public.

Capsule contents: your letter, photos, and voice notes are encrypted on your device before upload, and we store them only as ciphertext. If you make a capsule public, a short excerpt of the letter is stored as readable text so it can appear on the public wall after the unlock date.

Usage and device data: limited technical logs (such as IP address, browser type, and timestamps) used for security and reliability.

Privacy-friendly analytics: we count page views with a first-party, cookieless system that stores only anonymous aggregates (page, coarse device/browser, a country derived from your IP, and a daily one-way visitor hash). We set no tracking cookies, store no raw IP or full user-agent, and honor Do-Not-Track / Global Privacy Control. Country lookup uses GeoLite2 data created by MaxMind (www.maxmind.com); your IP is used only momentarily and never stored.

3. How we use information

To deliver your capsule link to the chosen recipient on the unlock date; to operate, secure, and improve the Service; to communicate with you about your account and delivery reminders; and to comply with legal obligations.

We do not sell your personal data, and we do not use the contents of your capsules for advertising or model training.

4. Encryption and access

Capsule contents are encrypted in your browser with AES-256-GCM before upload. The key for each capsule is sealed with a server master key that is kept separately from the database, so the database alone cannot decrypt a capsule. This is encryption at rest. It is not zero-knowledge: our server can unseal a capsule key, and does so only to release it to the recipient after the unlock date and to send a copy of a capsule by email when a recipient requests one. We do not read capsule contents, and access to our servers is limited to the operator of the Service. We may disclose information where the law requires it.

5. Public capsules

If you explicitly choose to make a capsule public, an excerpt of its contents may appear anonymously on our public wall on the unlock date. Do not include information you do not want shown publicly. Your recipient still receives the private link first.

6. Data retention

We retain encrypted capsule data until its delivery and for a reasonable period afterward. You can delete a capsule from your account until 24 hours before it is sent; its content, photos and voice note are then deleted. We keep a short record of the deletion (when the capsule was sealed and deleted, and whether a capsule was refunded) so your yearly allowance and refunds stay correct; it holds no content and no recipient address. Account data is kept while your account is active. You may request deletion of your account and associated data at any time.

7. Sharing with third parties

We share data only with infrastructure providers (such as hosting and email delivery) acting on our behalf under confidentiality obligations, or where required by law. These providers never receive capsule keys. If a recipient requests an email copy of a capsule, its contents pass through our email provider as an ordinary email.

8. Your rights (and California residents)

You may ask us to access, correct, export, or delete the personal information we hold about you. To exercise these rights, contact info@timedrop.it; we will not discriminate against you for doing so.

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect, to delete it, to correct it, and to opt out of its “sale” or “sharing.” timedrop.it does not sell or share your personal information, and we never use the contents of your capsules for advertising.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (consistent with COPPA). A capsule may be addressed to a child, but the account holder must be an adult. If you believe a child has given us personal information, contact info@timedrop.it and we will delete it.

10. Changes to this policy

We may update this Policy from time to time. Material changes will be posted on this page with a revised “last updated” date.

11. Contact

Questions about privacy? Email info@timedrop.it.