Legal

Privacy Policy

Last updated September 2026

Summary: We collect what we need to run your storefront and your orders. We do not sell your data. Buyers' details go to the creator they bought from, so that creator can fulfill the order.

1. Who is responsible

Droplett LLC, a Delaware limited liability company, is responsible for the personal information described here.

2. What we collect

Creators

  • Account details: name, email address, password (stored hashed, never in readable form)
  • Storefront details: business name, city and state, bio, links, photos, listings
  • Ship-from address, used as the return address on labels and to price postage
  • Order and payout records

Buyers

  • Name, email address and shipping address, collected at checkout
  • Order contents and status
  • If you join a creator's notify list: your name, and your email address or phone number

Card details are entered directly with Stripe and never reach droplett's servers.

3. How we use it

  • To operate storefronts, process orders, and send order notifications
  • To quote shipping rates and produce shipping labels
  • To show creators their own sales figures and customer lists
  • To respond to support requests and to prevent fraud and abuse

4. Who we share it with

  • The creator you bought from — your name, contact and delivery details, so they can fulfill your order
  • Stripe — payment processing and creator payouts
  • EasyPost and carriers — addresses and parcel details, to price and produce labels
  • Resend — to deliver transactional email
  • Supabase and Netlify — hosting and database infrastructure

We do not sell personal information, and we do not share it for advertising.

5. Notify lists

Joining a creator's notify list means that creator can email you when they open a drop. Every notification includes an unsubscribe link, and you can leave a list at any time. Creators can see who is on their list; they may not use it for unrelated marketing.

6. How long we keep it

Order records are kept while your account is open and afterwards where we need them for tax, accounting or dispute purposes. Notify-list entries are kept until you unsubscribe or the creator removes them.

7. Your choices

You can ask us to access, correct or delete your personal information by contacting us. Creators can edit most of their information directly in their dashboard. Some records must be retained where the law requires it.

8. Security

Data is encrypted in transit. Database access is restricted by row-level security so creators can only read their own records. No system is perfectly secure, and we will notify affected users if a breach materially affects them.

9. Children

droplett is not intended for anyone under 18 and we do not knowingly collect information from children.

10. Changes

We will post any changes on this page and update the date above.

11. Contact

Privacy questions: contact us.