Overview

KindleDrop is designed with privacy in mind. We collect minimal data, store files temporarily, and never build advertising profiles. We do use Google Analytics to see how the service is used. This policy explains exactly what we collect and why.

Data We Collect

1. Files You Upload

Your ebook files (PDF, EPUB, MOBI, DOCX, etc.)
File metadata (filename, size, content type)
Files are automatically converted to your chosen Kindle format (AZW3 or MOBI) when applicable

2. Download Codes

4-digit numeric codes generated to access your files
Codes expire after 1 hour
No link between codes and your identity

3. IP Addresses

Used by KindleDrop only for rate limiting (preventing abuse). Google Analytics also receives your IP address — see section 4
Limit: 20 uploads per hour, 60 requests per minute
IP data automatically expires after 1 hour
Not stored permanently by us and never used to build a profile

4. Analytics and Cookies

We use Google Analytics 4 (through Firebase) to count page views, uploads, and downloads. It sets cookies and collects your IP address, browser, and approximate location, as described in Google's privacy policy
We don't use advertising or remarketing cookies
We don't sell or share analytics data with anyone

5. What We DON'T Collect

No user accounts, names, or passwords
No email address, unless you type one into the contact form yourself
No file content analysis or reading
No advertising profiles, and no data sold to third parties

How We Store Your Data

File Storage

Files are stored in Cloudflare R2 (encrypted at rest)
Files are automatically deleted after 24 hours
Download links expire after 1 hour for security

Code Storage

Download codes stored in Upstash Redis
Automatically expire after 1 hour
Cannot be recovered once expired

Third-Party Services

We use the following services to operate KindleDrop:

Cloudflare R2: File storage (subject to Cloudflare's privacy policy)
Upstash Redis: Code storage (subject to Upstash's privacy policy)
Railway: Backend hosting (subject to Railway's privacy policy)
Firebase Hosting: Frontend hosting (subject to Google's privacy policy)
Google Analytics 4: Usage analytics, loaded through Firebase on every page
Cloudflare Turnstile: Bot check on upload, to stop abuse
Sentry: Error monitoring on the backend. Receives the URL and technical details of a failed request, not your IP address or file contents
Google Books API: Queried only when you use Auto-fill in the metadata editor. Your search text is sent to Google; your file is not
Tally: Hosts the optional author survey form, loaded only on the homepage section where it appears
Buy Me a Coffee: Handles donations if you choose to make one. We never see your payment details

Your Rights

Files are automatically deleted after 24 hours
Codes expire after 1 hour and cannot be recovered
You can contact us to request immediate deletion of your files
We don't store personal information, so there's no profile to delete

Security

We implement industry-standard security measures including encryption in transit (HTTPS), encryption at rest, rate limiting, and automatic data expiration. However, no internet transmission is 100% secure. Use KindleDrop at your own risk.

Children's Privacy

KindleDrop is not directed at children under 13. We do not knowingly collect information from children. If you believe a child has uploaded files, contact us for immediate deletion.

Changes to This Policy

We may update this policy occasionally. Changes will be posted on this page with an updated "Last updated" date. Continued use of KindleDrop constitutes acceptance of changes.

Contact

Questions about this privacy policy? Contact us at: saifulislamadar@gmail.com

Privacy Policy