Privacy Policy

This policy explains what BPMN Kit Drop stores and why.

What we store

For each drop we store the files you upload, a converted JSON representation of each file, and derived metadata (file names, element counts, timestamps, a content hash). Data is stored in Cloudflare D1.

If you comment on a drop we store the comment, the display name you typed, when you wrote it, and a one-way hash of a random key your browser keeps so that you can edit or delete your own comments. Anyone with the drop's link can read its comments and the names on them. Your browser also remembers your display name and that key in its local storage.

What we don't store

There are no accounts, logins, or tracking cookies. We do not store your IP address with your drop or your comments. When you submit an abuse report we store a salted, one-way hash of your IP address solely to rate-limit reports and collapse duplicates. When you write a comment we count it against a salted, one-way hash of your IP address to rate-limit comments; those counters are deleted within a day.

Retention

Drops, and the comments on them, are deleted automatically 90 days after they were last viewed, and immediately if removed by the operator.

Sharing

Anyone with a drop's link can view and download its files. We do not sell or share data with third parties.