Privacy Policy

1. Introduction

Droproll ("we", "our", or "us") provides this Privacy Policy to explain how we collect, use, and protect your information when you use the Droproll web application at droproll.app (the "Service").

Droproll develops rolls in two lanes. The standard lab is free and takes minutes. The express lab is paid and comes back in minutes. Both are covered by this policy.

2. What We Collect

Frames you send us: The images on a roll you send to the lab, and the developed versions we hand back. Frames on a roll you have not sent yet never leave your device · they sit in your own browser's storage, and we cannot see them.

Email address: If you sign in with an email address, we store it. We use it to send the code and the link you sign in with. Checkout has no email field: a roll carries the address on its own account, or none at all. Telling you by email that a roll is developed is a setting in your account and it is off unless you turn it on. Rolls developed before accounts were required carry the address that was typed at the time, and are still emailed there, because it is the only way back to them. If you add a contact address in Settings we send a six digit code to it once, to check it is yours. We do not send marketing email.

Wallet address: If you connect a cryptocurrency wallet (Solana or EVM-compatible), we store the public address to identify your account and to credit $DR. We never see or hold your private keys.

Payment records: For express-lab rolls we record the on-chain transaction hash so the payment can be verified. Standard-lab rolls involve no payment and no transaction.

Profile you choose to fill in: Display name, username, bio, avatar, website and social links, if you enter them in Settings.

Referrals and $DR: If you take part in referrals or earn $DR, we record which account referred which, and the balance owed.

Usage data: Basic analytics such as page views and feature usage, to improve the Service.

3. How We Use It

• To develop your rolls and hand back the frames
• To send the sign-in codes and links you ask for, and a link when a roll is ready if you have turned that on
• To verify express-lab payments and apply discounts and $DR
• To show your public rolls and profile, if you have made them public
• To keep the Service working and improve it

We do not sell your data, and we do not use your frames to train models.

4. Where Your Data Lives

The database and your frames are hosted on DigitalOcean infrastructure. We use industry-standard security measures to protect your information. No method of electronic storage is entirely secure, and we do not claim otherwise.

5. Who Processes It

We use the following third parties:

• DigitalOcean · hosting, database and image storage
• Replicate · machine developing for express-lab rolls
• Resend · sending email (sign-in codes and links, and roll notifications)

Express-lab payments happen on the public Base and Solana blockchains. Those are public networks rather than processors we hire: we record your wallet address and the transaction hash, and anything written to a public chain is visible to anyone and cannot be deleted by us. We take no card payments, so no card processor is involved and we never hold card details.

6. How Long We Keep It

A roll link keeps a developed roll available for 30 days. Rolls attached to an account stay until you delete them or close the account. Deleting a roll removes its frames from our storage.

7. What Other People Can See

A roll is public or hidden, and you choose which. A public roll can appear on Explore and on your profile, and can be opened by anyone with the link. A hidden roll is visible only to you and to anyone you send a link containing its access code.

Your profile is public only if you turn it on. While it is private, your name does not appear next to your rolls anywhere on the site.

8. Your Rights

You have the right to:

• Ask what personal data we hold about you
• Delete your account and the data attached to it yourself, from the bottom of Settings, or ask us to
• Delete any individual roll yourself
• Disconnect your wallet at any time

To exercise these rights, write to droproll.app@gmail.com. Closing your account keeps the record that a payment happened, with your name, email and wallet removed from it. Data already written to a public blockchain cannot be deleted by anyone, us included.

9. Cookies

We do not use tracking cookies. The Service uses an essential cookie for your sign-in session, and your browser's own storage to hold rolls you have not sent yet and your wallet connection state.

10. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

12. Contact

If you have any questions about this Privacy Policy, contact us at droproll.app@gmail.com