Privacy Policy

Effective September 26, 2026

This policy explains what personal information No Gimmicks Media LLC (“leafdrop”, “we”, “us”) collects when you use leafdrop at app.leafdrop.studio, why, who we share it with, and the choices you have. There are two kinds of people on leafdrop: Studios, who have an account and upload music, and Clients, who open a link a Studio sent them.

1. What we collect

From Studios

• Account details: your email, your name if you give it, your studio name, and your password (stored only as a salted hash, never in plain text).
• Studio details you add: branding (logo, colors, website, contact email) and payment settings such as a PayPal.me username or Stripe Payment Link.
• Your content: the audio you upload and information about it (format, waveform, loudness), project and client names, notes, comments, prices and payment status.
• Billing: Stripe handles your card. We receive and store only references (customer and subscription IDs) and your subscription status; we never see or store your full card number.
• Connected Stripe account: if you connect Stripe to take client payments, we store your Stripe account ID and whether it can accept payments. Stripe collects your identity and bank details directly under its own privacy policy.
• Messages you send us through Contact us or Send feedback.

From Clients

• The name you type when you leave a comment, and your comments.
• If you pay by card, Stripe processes the payment on behalf of the Studio; we only learn that the payment succeeded.
• Link activity: when a share link is opened, which tracks are played and for how long, and when files are downloaded. This is shown only to the Studio that sent you the link, so they know you’ve heard their work. It isn’t tied to your identity beyond the link itself and any name you type.

From everyone, automatically

• Technical data: your IP address, browser and the pages you request appear in our hosting provider’s server logs and are used briefly in memory to limit repeated sign-in attempts.
• Cookies and similar: one essential cookie keeps Studios signed in. The app also remembers small preferences in your browser (like your name on comments or a collapsed sidebar). We don’t use advertising or analytics cookies, and we don’t track you across other websites.

2. How we use it

• To run leafdrop: store and stream your files, show them to the people you share them with, and keep projects, comments and payments working.
• To bill subscriptions and apply promo codes, through Stripe.
• To send service emails, like password resets and storage warnings. We don’t send marketing emails without your consent.
• To keep leafdrop secure: prevent abuse, investigate problems, and enforce our Terms of Service.
• To answer your messages and improve the product.

We don’t sell your personal information, and we don’t use your audio to train AI models.

If you’re in the EEA or UK, our legal bases are: performing our contract with you (running your account), our legitimate interests (security, improving the Service, answering messages), your consent where we ask for it, and legal obligations (for example keeping billing records).

3. Studios and their Clients

A Studio decides what to upload and whom to share it with. For information a Studio puts into leafdrop about its Clients, the Studio is responsible for it (the “controller”) and leafdrop processes it on the Studio’s behalf. Clients with questions about their information in a project should contact the Studio first; we’ll help where we can.

4. Who we share it with

Only with service providers that help us run leafdrop, under contracts that limit their use of it:

• Railway: hosting the app and its database (United States).
• Cloudflare (R2): storing audio files and database backups (Asia-Pacific).
• Stripe: subscriptions and Client card payments.
• Resend: sending emails.
• Google Fonts: loading the typeface on some pages, which shares your IP address with Google.

We also share information when the law requires it, to protect people’s safety or our rights, or as part of a merger or sale of the business (in which case this policy keeps applying to your information).

5. International transfers

We and our providers may process information in the United States and other countries. Where required, transfers are protected by safeguards such as the EU Standard Contractual Clauses.

6. How long we keep it

• Account information and content: while your account is open. When you delete files, or we delete your account at your request, they’re removed from the live service right away and from backups within 30 days.
• Billing records: as long as tax and accounting laws require (we keep them 7 years).
• Server logs: 30 days. Messages to us: as long as needed to help you.

7. Your rights and choices

You can see and change most of your information in the app. You can also ask us to access, correct, export or delete your personal information, or object to or restrict how we use it, by emailing hello@leafdrop.studio. We’ll respond within 30 days and may need to confirm it’s you. Depending on where you live (for example in the EEA, the UK or California), you may have additional rights, including the right to complain to your data protection authority. We don’t sell or share personal information for cross-context behavioral advertising.

8. Security

We use encryption in transit (HTTPS), hashed passwords, private storage with short-lived access links, and keep each Studio’s data separate from other Studios. No system is perfectly secure; if a breach affects your information, we’ll tell you as the law requires.

9. Children

leafdrop isn’t for children under 16, and we don’t knowingly collect their information. If you think a child has given us information, contact us and we’ll delete it.

10. Changes

If we change this policy in a way that matters, we’ll tell you by email or in the app before it takes effect.

11. Contact

No Gimmicks Media LLC, 8 The Green, Ste B, Dover, DE 19901, United States · hello@leafdrop.studio