About Secret Drop
Secret Drop is a free, open source alternative to sending passwords and sensitive files by email or messaging apps, designed to respect your privacy. Anyone can read and audit the source code.
Thanks to its zero-knowledge architecture, the server has no way to access the content of your secrets. Your browser performs the AES-256-GCM encryption and never transmits the decryption key to the server.
Website Publisher
Guillaume Orsal
Phone: +33 6 60 31 47 57
Email: [e-mail]
Hosting
This website is hosted by:
OVH Cloud
2 rue Kellermann, 59100 Roubaix, France
Phone: +33 9 72 10 10 07
Data Protection
Secret Drop follows a “zero-knowledge” design. Your browser encrypts secrets before sending them to the server, which stores only encrypted data and cannot access their plaintext content.
Data stored:
- Encrypted data (content and encryption parameters)
- Metadata (creation date, expiration, read count)
- Email fingerprint (if provided, for admin access)
Data NOT stored:
- Plaintext content of secrets
- Encryption keys (transmitted only via the private part of the link)
- File name and type (encrypted with content)
Cookies
This website only uses essential technical cookies (session, theme preference). It uses no tracking or advertising cookies.
In accordance with CNIL (French data protection authority) recommendations, these strictly necessary cookies are exempt from consent requirements.
Contact
For any questions about this website, you can contact us at [e-mail].