Privacy Constitution
NexDrop was designed from day one with a radical premise: you should not need to hand over your personal data or identity to transfer a file across the room.
1. Zero Account & Zero Identity Tracking
We do not ask for your email address, phone number, or name. There are no user profiles, account databases, or persistent tracking IDs — the app is a static website with no user accounts and no file storage of any kind.
2. Zero Cloud File Retention
When you drop a 5 GB video or a confidential PDF into NexDrop, that file never touches any cloud storage bucket, CDN, or server filesystem. The file is sliced in browser memory and streamed directly across the WebRTC peer connection to your recipient.
3. Ephemeral Sessions with Auto-Destruction
Pairing sessions are short-lived: each one expires automatically after 10 minutes, the join token is single-use, and the session is destroyed the moment the direct connection opens. Automatic one-scan pairing uses a lightweight ephemeral signaling service that carries only connection establishment data (session id, single-use token, SDP, ICE, device name) — never file contents. The manual QR / copy-paste fallback exchanges codes directly between the two screens with no signaling service involved at all.
4. Zero Third-Party Advertising Trackers
NexDrop embeds zero third-party advertising tracking pixels, Facebook SDKs, behavioral fingerprinting scripts, or session replay recorders. Your browsing patterns and transferred file names remain strictly confidential.
5. Local Device Storage Exclusively
Optional transfer history and device preferences are stored inside your own browser's local storage. This data never leaves your device and can be erased instantly at any time via Settings > Clear Local History.