Privacy Policy

This Privacy Policy describes how DropQ (“we”, “us”, “our”) collects, uses, discloses, and protects information when you use dropq.me (the “Service”). By using the Service you consent to the practices described here.

1. Information We Collect

a) Information you provide

• Email address (for authentication via Firebase Auth, Google Sign-In, or Email/Password)
• Username (public)
• Profile data: avatar image, bio, optional social-media handles
• Content you post: questions, answers, comments, reactions/votes

b) Information collected automatically

• SHA-256 hash of your IP address (for anti-spam rate limiting; the original IP is not stored)
• Device, browser, and approximate location (via standard server logs and Firebase telemetry)
• Cookies and similar tracking technologies (see our Cookie Policy)

c) From third parties

• If you sign in with Google: your name, email, profile photo, and Google account ID

2. How We Use Your Information

• To provide, maintain, and improve the Service
• To create and manage your account
• To display public profile data and content to other users
• To prevent spam, abuse, and security incidents (rate limiting via hashed IP)
• To respond to your support requests
• To comply with legal obligations

3. Anonymous Questions

When a question is submitted anonymously, the sender’s identity is not displayed publicly. However, we may retain a SHA-256-hashed identifier (e.g., hashed IP) internally for the sole purpose of preventing abuse. We do not provide this information to the question recipient or other users.

4. Sharing & Disclosure

We do not sell your personal information. We share information only in the following limited cases:

• Service providers: Google Firebase (authentication, database, hosting), and any analytics or advertising partner we use (e.g., Adsterra).
• Legal: When required by law, subpoena, or to protect rights, safety, or property.
• Business transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred subject to this Policy.

5. Cookies & Tracking

See the Cookie Policy for details. You can disable cookies through your browser settings.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Hashed IP addresses for rate limiting are kept for up to 90 days. You may request deletion of your account and associated personal information at any time.

7. Your Rights (GDPR, CCPA, etc.)

Depending on your jurisdiction you may have the right to:

• Access the personal information we hold about you
• Request correction or deletion
• Withdraw consent or object to processing
• Request a portable copy of your data
• Lodge a complaint with a supervisory authority

To exercise any of these rights, email dropqme@gmail.com.

8. Security

We use industry-standard security practices (HTTPS, hashed credentials, role-based database access). However, no method of transmission or storage is 100% secure. You use the Service at your own risk.

9. Children’s Privacy

The Service is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe we have collected such information, please contact us so we can delete it.

10. International Transfers

Your information may be processed in countries outside of your country of residence (notably the United States and the European Economic Area). By using the Service you consent to such transfers.

11. Changes to this Policy

We may update this Policy at any time. The updated version will be posted on this page with a new effective date.

12. Contact

Privacy questions or data requests: dropqme@gmail.com