Privacy Policy

Effective Date: July 17, 2026

1. Introduction

Monodrop is an independent project operated by Can Egridere. This policy explains what personal data Monodrop processes, why it is processed, how long it is kept, and the choices available to you.

2. Information We Collect

Depending on how you use Monodrop, we process:

  • Account data: Your Google account identifier, email address, display name, avatar, username, profile details, and social links.
  • Content and activity: Drops, posts, comments, feedback, follows, bookmarks, reports, claims, notifications, and ownership verification records.
  • Technical data: IP address, browser and device details, request times, security logs, and diagnostic information collected by Monodrop and its infrastructure providers.
  • Messages: The name, email address, subject, and message you submit through the contact form.
  • Push data: A browser push subscription endpoint and encryption keys when you choose to enable browser notifications.

3. Use of Your Information

We use this information to:

  • Create and manage your account.
  • Publish and personalize the content and social features you request.
  • Operate ownership verification, moderation, support, notifications, and abuse prevention.
  • Measure aggregate product usage after analytics consent and improve reliability and performance.

Where applicable, the legal bases are performance of our agreement with you, our legitimate interests in operating and securing Monodrop, your consent for optional analytics, and compliance with legal obligations. Monodrop does not sell personal data or use it for targeted advertising.

4. Cookies and Browser Storage

  • Supabase authentication: Essential sb-*-auth-token cookies keep you signed in and expire with the authentication session.
  • Cookie choice: monodrop-cookie-consent is stored in local storage until you clear browser data or change your choice.
  • Google Analytics: If you accept optional analytics, _ga and _ga_* distinguish users and preserve session state. Their default maximum lifetime is two years and may be refreshed on return visits.
  • Browser notifications: The browser may retain service-worker, cache, and push-subscription data until you disable notifications, clear site data, or the subscription expires.

Rejecting optional cookies prevents Monodrop from loading Google Analytics. Essential authentication and security storage remains necessary for signed-in features.

5. Service Providers

Monodrop uses the following providers only where their service is needed:

  • Supabase: authentication, database, file storage, and backend services.
  • Vercel: hosting, content delivery, request logs, and application execution.
  • Google: Google sign-in and, only after consent, Google Analytics.
  • Resend: delivery of contact-form email.
  • Microlink: retrieval of public page metadata and screenshots when a drop URL is submitted or refreshed.
  • OpenAI or Google Gemini: AI-assisted drafting of drop copy when that feature is used and the respective provider is configured.
  • Your browser push service: delivery of browser notifications after you opt in.

We may also disclose information when required by law or reasonably necessary to protect users, Monodrop, or the public.

6. Retention

  • Account and content data is kept while your account is active or while it is needed to provide the service.
  • When an account is deleted, public profile identifiers are anonymized. Content may remain attributed to a deleted user where necessary to preserve conversations, moderation records, or legal claims.
  • Contact messages are kept only as long as reasonably needed to answer and manage the request.
  • Analytics cookies use the periods listed above. Infrastructure, security logs, and backups follow provider schedules and are retained only as needed for security, recovery, fraud prevention, or legal obligations.

7. International Transfers

Some providers may process data outside your country or the European Economic Area. Where required, transfers rely on an adequacy decision, Standard Contractual Clauses, or another legally recognized safeguard. You may request information about applicable safeguards through the contact form.

8. Your Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing; receive a portable copy of your data; withdraw consent; and complain to a data protection authority. These rights can be limited where the law permits. Use the contact form to make a request.

9. Security

We use technical and organizational measures intended to protect personal data, but no online service can guarantee absolute security.

10. Contact

For privacy questions or rights requests, use the Monodrop contact form.