← saferdrop.app

Privacy Policy

Last updated: 4 May 2026  ·  Applies to saferdrop.app and the SaferDrop macOS app

Short version: The SaferDrop app processes your files entirely on your device. Nothing you drop into it is ever sent to a server. This website only collects your email address if you choose to sign up for launch notifications.

1. Who we are

SaferDrop ("we", "us") is an independent macOS app and website operated at saferdrop.app. For privacy enquiries contact us at hello@saferdrop.app.

2. The macOS app

The SaferDrop macOS app processes files locally on your Mac using on-device machine learning and pattern matching. It does not transmit file contents, transcripts, detected PII, or any processing results to any server — ours or anyone else's.

No telemetry, crash reports, or usage analytics are collected by the app. No account is required.

3. This website — what we collect

3a. Email address (waitlist)

If you submit your email address via the "Notify me" form, we collect it solely to send you a notification when SaferDrop launches. This is the only personal data we actively collect.

3b. Infrastructure data (Cloudflare)

This site is served by Cloudflare (USA). Cloudflare may process your IP address and HTTP request metadata for security and performance purposes. This is a legitimate interest under GDPR Article 6(1)(f). Cloudflare does not sell personal data.

3c. Bot detection (Botfighter)

We use Botfighter (botfighter.dev) to distinguish human visitors from automated bots. It may process your IP address and browser characteristics. No personally identifying profiles are built.

3d. Cookies

This website does not set any first-party cookies. Cloudflare and Botfighter may set short-lived technical cookies necessary for security. No tracking or advertising cookies are used.

4. Your rights under GDPR

If you are located in the European Economic Area (EEA) or UK you have the following rights:

To exercise any right email hello@saferdrop.app. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

5. International transfers

Your email address is stored by Kit in the United States. Kit participates in the EU–US Data Privacy Framework, providing an adequate level of data protection under GDPR Article 45. Cloudflare also operates globally under appropriate safeguards.

6. Children

This site is not directed at children under 16. We do not knowingly collect personal data from minors. If you believe a minor has submitted their email, contact us and we will delete it immediately.

7. Changes to this policy

We may update this policy as the service evolves. Material changes will be noted by updating the date at the top. Continued use of the site after changes constitutes acceptance.

8. Contact

For any privacy question or to exercise your rights: hello@saferdrop.app