LEGAL
Privacy Policy
Last updated: June 18, 2026
The short version
ZeroDrop is built to be private by design. Temporary inboxes are anonymous — we don't know who you are and we don't want to. Emails self-destruct after 30 minutes. The only personal data we collect is your email address if you voluntarily join the Workspaces waitlist, or your billing information when you subscribe to Workspaces.
What we collect
Free tier: Nothing. We generate a random inbox name in your browser using localStorage. No account, no cookies, no tracking. We never see your real email address. Waitlist: If you choose to join the Workspaces waitlist, we store your email address to notify you when Workspaces launch. That's it. Workspaces subscribers: Name, email address, and billing information collected at checkout. Payment card data is handled exclusively by Dodo Payments — we never see or store your card details. Usage data: We use Vercel's built-in analytics for basic request metrics (response times, error rates). No personal identifiers are collected.
Payment processing
Payments for Workspaces are processed by Dodo Payments, who acts as the Merchant of Record for all subscriptions. Your payment card information is handled by Dodo Payments and is subject to their privacy policy. We do not store or have access to your payment card details.
What we don't collect
We do not use advertising trackers, third-party analytics (Google Analytics, Mixpanel, etc.), fingerprinting, or cookies of any kind on the free tier. We do not sell, rent, or share your data with anyone.
Email content
Emails sent to @zerodrop-sandbox.online are stored temporarily in our database for up to 30 minutes, then permanently deleted by an automated TTL process. We do not read, analyze, or retain email content beyond what is necessary to display it to you in the dashboard.
Waitlist data
If you previously joined the Workspaces waitlist, your email address is stored securely in our database. You can request deletion of your email at any time by emailing [email protected].
New Workspaces customers go through Dodo Payments checkout directly. Your name and email provided at checkout are used solely for account setup and billing communication.
Data retention
Temporary inbox emails: deleted automatically after 30 minutes. Waitlist emails: retained until Workspaces launch or until you request deletion. Workspaces subscriber data: retained for the duration of the subscription and up to 90 days after cancellation for billing records. Server logs: retained for up to 7 days for debugging purposes, then deleted.
Your rights
You have the right to request access to, correction of, or deletion of any personal data we hold about you. To exercise these rights, email [email protected]. We will respond within 30 days.
Security
All data is transmitted over HTTPS. Waitlist emails and API keys are stored encrypted at rest. We use industry-standard infrastructure providers (Vercel, Upstash, Cloudflare) with their own security certifications. Payment processing is handled by Dodo Payments with PCI DSS compliance.
Changes to this policy
If we make material changes to this policy, we will update the date at the top of this page. We will not retroactively reduce your privacy rights without explicit notice.
Contact
Questions about this policy? Email [email protected].