1. Data Controller
The administrator and operator of the KoDrop online service is the Service Operator ("Operator"). Following Privacy by Design and data minimization principles, the service is designed to reduce the processing of user data to the absolute technical minimum.
All inquiries regarding privacy and data subject rights under the General Data Protection Regulation (GDPR) are handled exclusively via the official contact form available on the website.
2. File Transfer and Automatic Deletion
KoDrop is built exclusively for temporary, ad-hoc file transfers (PDF, JPEG, PNG, WebP) between devices. The following rules govern file handling:
- Encryption at rest: Every uploaded file is stored in an authenticated, strongly encrypted format on the server disk to protect against unauthorized access.
- Time-limited availability: Files remain available for collection for a maximum of 15 minutes after upload completion (unless downloaded earlier).
- Irreversible deletion: When the transfer expires or is claimed and downloaded, the file is automatically and permanently deleted from the disk.
- No backup storage: The service does not create or retain any backup copies of expired or deleted files. Once deleted, files cannot be recovered under any circumstances.
- Zero content inspection: The Operator does not browse, inspect, index, or analyze the contents of uploaded files.
3. Cookies and Local Technologies
KoDrop uses technical cookies and browser local storage mechanisms solely for operational purposes and, where consented to, for advertising:
- Essential technical storage: Required to remember language preferences, CMP consent state, and secure file transfer sessions.
- Local browser history: Any transfer history shown in the web application is saved strictly within your browser's local storage (IndexedDB/LocalStorage) and is never transmitted to our servers.
4. Third-Party Advertising and Google AdSense
The website may display advertisements served by Google LLC and its partners (Google AdSense / Google Ad Manager):
- Third-party vendors, including Google, use cookies to serve ads based on prior visits to this website or other sites on the Internet.
- Advertising cookies enable Google and its partners to serve relevant ads based on visits across the web.
- Users may opt out of personalized advertising via Google Ad Settings or via www.aboutads.info.
- Cookie consent preferences can be adjusted at any time using the Cookiebot CMP platform available via the "Cookie settings" button in the footer.
5. Cookie Declaration (Cookiebot)
6. Contact Form
When using the contact form, provided details (optional name, email address, message body) are processed under Art. 6(1)(f) GDPR (legitimate interest of the Administrator) strictly to reply to your inquiry.
Form data is not used for marketing or profiling, and is never sold or disclosed to third parties.
7. User Rights under GDPR
Under the General Data Protection Regulation (GDPR), every individual has the following rights:
- Right of access and to obtain a copy of personal data;
- Right to rectification of inaccurate data;
- Right to erasure ("right to be forgotten");
- Right to restriction of processing;
- Right to lodge a complaint with a data protection supervisory authority.
To exercise your rights, please submit a request via the contact form on our website.
8. Policy Updates
The Operator reserves the right to update this Privacy Policy to reflect legal changes or service improvements. The most current version is always available on this page.