Legal Notice

About Secret Drop

Secret Drop is an open source project built to provide a simple, free, and privacy-respecting alternative to sharing passwords and sensitive files via email or messaging apps. The source code is public and auditable.

The zero-knowledge architecture ensures the server can never access the content of your secrets. AES-256-GCM encryption is performed entirely in your browser, and the decryption key is never transmitted to the server.

Website Publisher

Guillaume Orsal

Phone: +33 6 60 31 47 57

Email: [e-mail]

Hosting

This website is hosted by:

OVH Cloud

2 rue Kellermann, 59100 Roubaix, France

Phone: +33 9 72 10 10 07

Data Protection

Secret Drop is designed with a "zero-knowledge" principle. Secrets are encrypted in your browser before being sent to the server. The server only stores encrypted data and cannot access the plaintext content of your secrets.

Data stored:

Encrypted data (content and encryption parameters)
Metadata (creation date, expiration, read count)
Email fingerprint (if provided, for admin access)

Data NOT stored:

Plaintext content of secrets
Encryption keys (transmitted only via the private part of the link)
File name and type (encrypted with content)

Cookies

This website only uses essential technical cookies (session, theme preference). No tracking or advertising cookies are used.

In accordance with CNIL (French data protection authority) recommendations, these strictly necessary cookies are exempt from consent requirements.