ChuteDrop
Privacy policy
Last updated 14 September 2026
ChuteDrop moves large files between people. This page describes exactly what we hold, why, for how long, and how you get rid of it.
The short version
- Your files are stored until you delete the transfer or its retention period ends. Studio and Studio Plus offer non-expiring transfers while you keep an eligible subscription.
- We do not open, scan, index, analyse or sell the contents of your transfers, and we do not use them to train anything.
- We do not run advertising trackers and we do not sell personal data.
- You can delete your account, and everything attached to it, from inside the app and the web dashboard at any time.
What we collect
Account data
An account identifier, your email address, and — if you use Sign in with Apple — the pseudonymous subject identifier Apple gives us. If you use Apple's private relay address, that relay address is all we ever see. We also store your theme preference so the app and the website agree with each other.
Transfer data
For each transfer we store the file names, sizes, content types, a CRC32 checksum per file, the link token, the expiry date, the number of times the link has been downloaded, and the file bytes themselves. The bytes live in Cloudflare R2 object storage (hosted in Cloudflare's Eastern North America region) and are delivered through Cloudflare's network.
Payment data
We never see or store your card. Purchases made in the iPhone or iPad app are handled by Apple. Purchases made on the web are handled by Dodo Payments, which acts as the merchant of record and is responsible for billing and tax. We store checkout, payment and subscription identifiers, purchase amounts, payment status, renewal dates, and refund or dispute status to deliver purchases and correct billing problems.
When you accept purchase terms, we record the terms version, a hash of the exact consent text, the server time, your IP address and browser user agent. The version, hash and acceptance time accompany checkout metadata so we can verify consent and resolve billing disputes.
Operational data
Our servers process the usual request metadata — IP address, user agent, timestamps — to serve requests, apply rate limits and investigate abuse. Download counts are incremented on file and ZIP requests only; preview bots that fetch the link page for an unfurl card are not counted.
How long we keep it
| Data | Retention |
|---|---|
| File bytes | Until you delete the transfer or its chosen expiry (1–90 days). Studio and Studio Plus transfers can have no expiry. If access to those plans ends, non-expiring transfers are deleted at the later of 30 days after creation or 7 days after access ends. Renewing either plan before expiry preserves those transfers. Timed transfers use storage lifecycle rules; scheduled cleanup deletes transfers after their deadline. |
| Transfer records | Kept until account deletion; deleting a transfer removes its files and disables its link. |
| Account record | Until you delete your account. |
| Payment and purchase-consent records | Purchase and consent evidence remains after account deletion for billing support, refunds and disputes. Apple and Dodo Payments retain their records for the periods required of them. |
Who we share it with
We use a small number of processors and nothing else: Cloudflare (object storage, the API and the link surface), Vercel (this website), Apple (sign-in and in-app purchases) and Dodo Payments (web purchases). We do not sell personal data, and we do not share it for cross-context behavioural advertising.
We disclose data when we are legally required to, and to act on a valid abuse or copyright complaint.
Security
Links are protected by 128-bit random tokens: they are not guessable and we never publish or index them. Anyone you send a link to can open it, so treat it like a key. Uploads and downloads run over TLS, and files are encrypted at rest by the storage provider. If a link gets away from you, revoke it from your dashboard — the link dies and the objects are removed.
Your rights
Depending on where you live you may have the right to access, correct, export or erase your personal data, and to object to or restrict certain processing. Delete your account from Settings and everything goes: the account, the transfers and the files. For anything else, write to support@mattmade.ai and we will answer within 30 days.
Children
ChuteDrop is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has created an account, tell us and we will remove it.
International transfers
Our processors operate globally, so your data may be processed outside your country. Where required, transfers rely on the appropriate legal mechanisms, such as the European Commission's standard contractual clauses.
Changes
If this policy changes materially we will update the date at the top and notify account holders by email before the change takes effect.
Contact
Privacy questions, data requests and complaints: support@mattmade.ai.