What this software and this website do with information about you.
Last updated 2 October 2026
Nothing you make passes through us. Files, messages, posts, and shops move between devices. There is no BridgeDrop server holding them, and we could not read them or count them if we wanted to.
The application does not track you. It has no analytics, no telemetry, no advertising identifier, and no account. Sponsored posts are the same for everyone in your region. Everything the app sends is listed below.
That is the complete list. Typefaces, icons and everything else the interface needs are bundled inside the application.
When a direct connection is impossible, a transfer can be relayed through a machine that you or the other person chose. A relay carries only ciphertext — it cannot read file contents, names, or sizes.
Photos you add to listings are resized and stripped of their metadata, including location, before they leave your device. A place you type on a post or listing is shared exactly as you wrote it.
We pick them, sign them, and publish them the same way for everyone. The app chooses which to show using the region your device is set to, on your device — your region is never sent anywhere. We do not record who sees a sponsored post or who taps one.
Tapping a sponsored post opens the advertiser's website in your browser. What happens there is covered by their privacy policy, not this one.
Your transfer history, your messages, the devices you have dealt with, your device's cryptographic identity, copies of posts and shops you keep for the people you follow, and a week of diagnostic logs. All of it lives in the application's data folder on your own disk. Open logs under About shows you exactly what the logs contain.
Deleting the application data folder removes all of it permanently. Deleting a post or listing stops your device sharing it; copies already on other people's devices are dropped as those devices make room, or at once if we block it, but we cannot reach into anyone's device to remove them.
Reports you send, and email you write to us. We keep reports only as long as we need to act on them and to keep a record of what we decided. We do not sell or share either, except where the law requires it or someone is in danger.
Hosted on Vercel, which records standard server request logs. There are no cookies, no advertising, no trackers and no analytics script.
This site loads nothing from anywhere else. Even the typefaces are served from this domain rather than a font service, so visiting does not hand your address to a third party. Your browser's network inspector will show requests to bridgedrop.app and nowhere else.
Where the GDPR or similar law applies, you can ask for a copy of what we hold about you, ask for it corrected, or ask for it deleted. Since we hold almost nothing — at most a report you sent or an email you wrote — that is a short list. Write to privacy@bridgedrop.app and you will get an answer within 30 days.
BridgeDrop is not for children under 13, and we do not knowingly collect information from them.
If this policy changes in a way that affects what is collected, the date above changes and the previous version stays available on request. We will not begin collecting something new without saying so here first.