Privacy Policy

1. Who We Are

DropMyNote (“we”, “our”, “us”) is an online platform based in Kathmandu, Nepal, that allows students to upload, share, and discover academic study notes in PDF format. Users may earn passive income when their notes are viewed by others. You can reach us at blankspaceofficial2000@gmail.com.

2. Information We Collect

We collect information you provide directly, information collected automatically, and information from third-party services you connect to your account.

Information you provide

• Account details: full name, email address, password (hashed), profile photo
• Academic profile: degree program and university/institution
• Note content: PDF files, titles, descriptions, course/topic tags
• Payout details: wallet type, wallet ID
• Communications: messages you send to our support team

Information collected automatically

• IP address (hashed and used solely for view deduplication via Redis; not stored permanently)
• Device type, browser, and operating system
• Pages visited, notes viewed, and interaction events
• Note view counts and daily view statistics

Information from third parties

• If you sign in with Google, we receive your name, email, and profile photo from Google OAuth

3. How We Use Your Information

• Create and manage your account
• Deliver the core service: uploading, viewing, and discovering notes
• Track views and calculate creator earnings accurately
• Process payout requests and prevent fraudulent activity
• Personalise your experience based on your academic program
• Send transactional notifications (account changes, payout status)
• Moderate content and enforce our Content Policy
• Generate anonymised, aggregate statistics for platform improvement

4. Cookies and Local Storage

We use session cookies managed by Supabase Auth to keep you logged in. For password-protected notes, we store a short-lived access cookie note_[id]_access in your browser. We do not use third-party advertising cookies.

5. Data Sharing

We do not sell your personal data. We share data only with:

• Supabase — database, authentication, and file storage (servers may be located outside Nepal)
• Upstash — Redis-based rate limiting for view deduplication
• Google — only when you choose Google OAuth sign-in
• Law enforcement — when required by applicable Nepali law or a valid court order

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law or to resolve outstanding payout disputes. Uploaded PDF files linked to your account are deleted from storage upon your request.

7. Security

Passwords are hashed before storage. PDF files are served through a reverse proxy that requires a proprietary header, reducing direct hotlinking. We use Row Level Security (RLS) in our database so users can only access data they are authorised to see. However, no internet transmission is 100% secure and we cannot guarantee absolute security.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data via your profile settings
• Request deletion of your account and associated data
• Withdraw consent for optional processing at any time

To exercise these rights, email blankspaceofficial2000@gmail.com.

9. Children

DropMyNote is intended for students aged 16 and above. We do not knowingly collect personal data from children under 16. If you believe a child has registered, contact us immediately for account removal.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page. Continued use of DropMyNote after changes constitutes acceptance of the revised policy.