Policy & Legal Compliance

Privacy Policy

Last Updated: November 1, 2026 • Effective Date: October 2026 • Published by Yuvaan Kaarthikeyaa Adulapuram

At LabDrop (accessible at https://labdrop.online), one of our core tenets is complete transparency regarding privacy, file security, and digital data. Because LabDrop was built specifically to empower students, researchers, and engineers to quickly move files across lab computers and personal devices without permanent footprints, our platform is fundamentally engineered around ephemeral, temporary storage and zero data retention.

This Privacy Policy outlines the types of information collected, processed, and maintained by LabDrop, how we handle user-uploaded files, our cookie practices, and how third-party advertising partners (including Google AdSense) operate on our site.

Key Privacy Summary: We do not sell your personal data. Guest transfers require no account, require no personally identifiable information (PII), and all uploaded files and generated codes are automatically, permanently deleted within 30 minutes of creation.

1. The Information We Process

A. User-Uploaded Files & Code Snippets (Ephemeral Storage)

  • Quick Transfers (No Login Required): Files and text snippets uploaded via the guest transfer system are stored temporarily in high-security cloud storage solely to facilitate transmission. These files are governed by an automated lifecycle worker that hard-deletes them after 30 minutes. Once expired, files cannot be recovered by any party.
  • Saved Transfers (Authenticated Users): Users who register an optional account may choose the "Save for Later" feature, which preserves transfers for up to 7 days before automated deletion. Users can manually delete their transfers at any time via their dashboard.
  • Zero Payload Indexing: We do not inspect, index, analyze, scrape, or monetize the contents of your uploaded lab files or code.
  • Security PIN Protection: Users can optionally secure transfers with a 4-digit PIN. PINs are salted and hashed on the server and are required before any download link is granted.

B. Account Data (Optional Registration)

Creating an account is entirely optional. If you choose to register, we collect:

  • Email Address: Used solely as your account username and for essential security authentication.
  • Password: Hashed using modern, salted cryptographic functions (bcrypt). We never store or transmit your password in plain text.

C. Server Logs & Diagnostic Telemetry

Like all web servers, our systems automatically log basic technical request parameters, including:

  • Internet Protocol (IP) addresses (used for short-term rate limiting, DDOS prevention, and abuse detection).
  • Browser user-agent, operating system, and request timestamps.
  • Error telemetry to ensure uptime and correct faulty transfers.

These logs are periodically purged and are never linked to personal identities.

2. Google AdSense & Third-Party Advertising Policy

LabDrop uses Google AdSense to display advertisements that support our free hosting and server costs. It is important to understand how Google and third-party advertising networks process data:

  • Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites on the Internet.
  • Google's use of advertising cookies (such as the DoubleClick DART cookie) enables it and its partners to serve ads to users based on their visits to LabDrop and other sites on the web.
  • Users may opt out of personalized advertising by visiting Google Ads Settings.
  • Alternatively, you can opt out of third-party vendor use of cookies for personalized advertising by visiting the Network Advertising Initiative opt-out page at www.aboutads.info/choices/.

3. Cookies and Local Storage

Cookies are small text files placed on your device to ensure proper site functionality. LabDrop uses cookies and browser localStorage strictly for:

  • Essential Session Maintenance: Storing JWT authentication tokens if you log into an account.
  • UI State: Preserving workspace preferences (such as dark/parchment mode or selected transfer folders).
  • Advertising Partners: As described above, Google AdSense and its certified advertising networks may place and read cookies on your browser to measure ad impressions and relevance.

You can instruct your browser to refuse all cookies or notify you when a cookie is being sent. However, basic authentication features may become unavailable if session cookies are disabled.

4. Data Security & Safety Protocols

We implement rigorous technical safeguards to protect your files and data:

  • TLS 1.3 / SSL Encryption: All data transferred between your browser, lab computer, and our servers is encrypted in transit using industry-standard TLS protocols.
  • Executable Blocking: To protect student devices against lab malware or infected USB payloads, LabDrop enforces strict server-side blocking of dangerous executable file types (including .exe, .bat, .cmd, .msi, .vbs, .ps1).
  • Isolated Cloud Buckets: Ephemeral uploads are stored in restricted S3 cloud buckets with pre-signed download credentials that automatically expire.

5. Children's Online Privacy Protection (COPPA)

LabDrop is intended for students in high school, college, university, and working professionals. We do not knowingly collect any personally identifiable information from children under the age of 13. If you believe that a child under 13 has provided personal information on our site, please contact us immediately, and we will promptly delete such records from our databases.

6. GDPR and California Privacy Rights (CCPA / CPRA)

Depending on your jurisdiction, you have certain rights regarding your personal data:

  • Right to Access: You have the right to request copies of any personal data we hold about you.
  • Right to Rectification: You can request corrections to incomplete or inaccurate data.
  • Right to Erasure ("Right to be Forgotten"): You can request immediate deletion of your account and any associated saved files.
  • Right to Opt-Out of Data Sale: LabDrop does not sell, trade, or rent personal information to any third parties.

7. Changes to This Privacy Policy

We may update our Privacy Policy periodically to reflect technological improvements, security practices, or regulatory amendments. Any updates will be posted directly on this page with an updated "Last Updated" revision timestamp.

8. Contacting Us

If you have questions, feedback, or data privacy requests concerning this Privacy Policy, please contact our lead developer and data operator directly: