Privacy Policy
Last updated: May 2026DropKit ("we", "us", "our") operates trydropkit.com. This policy explains what data we collect, how we use it, and how to contact us with questions or requests.
Contact: support@trydropkit.com
1. Data We Collect
When you purchase: Your email address (to deliver your download link and for order records). Payment details are processed directly by Stripe — we never store or see your card number, expiry, or CVV.
When you visit the site: We collect standard analytics data including pages viewed, time on page, scroll depth, button clicks, device type, and referral source. This is collected via PostHog (see Section 4).
Automatically: Your browser sends your IP address and user-agent string with every request. We do not store raw IP logs beyond what our hosting provider retains for security purposes.
2. How We Use Your Data
- To deliver your DropKit download after purchase.
- To process and record your transaction.
- To send you product updates and new Skill packs (you can opt out at any time by emailing us).
- To understand how visitors use the site so we can improve it.
- To measure the performance of our advertising campaigns (via Meta Pixel and Meta Conversions API).
3. Cookies and Local Storage
We use the following:
- _fbp / _fbc — Meta Pixel cookies that identify your browser for ad measurement and attribution. Set by Meta's fbevents.js script.
- PostHog cookies — Used by PostHog for session identification and analytics. See PostHog's privacy policy.
- dk_deadline (localStorage) — Stores the expiry time for the urgency countdown on the landing page. Contains no personal data.
- dropkit_sess (sessionStorage) — A random session identifier used to group analytics events within a single browser session. Cleared when you close the tab.
- dropkit_fbclid (localStorage) — Stores the Facebook click ID from the URL if you arrive from a Meta ad, so it can be passed to our Conversions API for attribution.
For more detail, see our Cookies Policy. To opt out of Meta ad tracking, visit Meta Ad Settings.
4. Third-Party Services
- Stripe — Processes payments. Stripe stores your card details on their PCI-compliant infrastructure. Stripe Privacy Policy.
- PostHog — Provides product analytics and session recordings. Data is hosted in the EU. PostHog Privacy Policy.
- Meta (Facebook) — We use Meta Pixel and Meta Conversions API to measure ad performance. Meta Privacy Policy.
- Netlify / Vercel — Website hosting. Standard access logs may be retained per their terms.
- Google Fonts — Used to load web fonts. Google may log your IP when fonts are requested.
5. Data Retention
Purchase records (email + order ID) are kept for as long as is reasonably necessary to support refund requests and product updates. Analytics data is retained per PostHog's default retention settings. You can request deletion at any time.
6. Your Rights
Depending on where you live, you may have the right to access, correct, or delete the personal data we hold about you. To exercise any of these rights, email support@trydropkit.com and we will respond within 30 days.
7. Children
DropKit is not directed at children under 16. We do not knowingly collect data from anyone under 16.
8. Changes to This Policy
We may update this policy. Material changes will be noted with a revised "Last updated" date above.
9. Contact
Questions? Email support@trydropkit.com.