Privacy Policy

DropQueue provides hosted pre-launch waitlist pages with a built-in referral queue. If you are a fan joining a brand's waitlist, that brand is the controller of your data and DropQueue processes it on their behalf.

Account data. When you create an account we collect your email address. For email/password sign-up, your password is hashed by our authentication provider (Supabase) and never stored in plain text. If you sign in with Google or Discord, we receive your name, email address, and profile picture from that provider — we never receive your social account password.

Third-party sign-in data. When you authenticate via Google Sign-In or Discord OAuth, those services share with us only your name, email address, and public profile picture. We use this information solely to create and manage your DropQueue account. We do not use it for advertising, we do not sell it, and we do not share it with any third party beyond what is strictly required to operate the Service. You can request removal of your account data at any time (see “Your rights” below).

Waitlist data. When someone joins a drop, we collect their name, email address, and (optionally) phone number, along with the referral relationships needed to power the queue. Names are displayed in anonymised form on the public leaderboard (first name + last initial only).

Usage data. We may collect limited, aggregated analytics (such as which pages are viewed and key activation events) to improve the Service. We do not sell this data.

Cookies. We use essential cookies to keep you signed in and secure your session. If a drop creator runs an A/B test on their teaser, we set a single lightweight cookie (dq_ab) that persists your variant assignment for 180 days so you see a consistent experience. We do not use third-party advertising cookies.

We use the information we collect to:

• Operate the Service — create drop pages, run the referral queue, and send launch emails.
• Authenticate you and keep your account secure.
• Respond to support requests and send important account notices.
• Improve and protect the Service.

We rely on a small number of trusted processors to run DropQueue. Each only receives the data needed to perform its function:

• Supabase — database, authentication, and storage.
• Resend — transactional and launch emails.
• Lemon Squeezy — our Merchant of Record for payments; they process billing data and handle applicable taxes.
• Cloudflare — hosting, content delivery, and bot-detection (Turnstile). Turnstile analyses browser signals and IP addresses to distinguish humans from bots; no data from this process is used for advertising.
• Google — optional sign-in via Google OAuth. If you choose “Continue with Google”, Google shares your name, email, and profile picture with us under Google’s Privacy Policy. DropQueue’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Discord — optional sign-in via Discord OAuth. If you choose “Continue with Discord”, Discord shares your username, email, and avatar with us under Discord’s Privacy Policy.

We do not sell your personal information to anyone.

DropQueue uses Google Sign-In so that brand owners can create and manage their drop pages securely without needing a separate password. The only Google account data we receive is your email address, display name, and profile picture.

We use that data to:

• Create and identify your DropQueue account.
• Display your name inside the dashboard.
• Send you transactional emails about your drops.

We do not use Google user data to serve advertisements, build advertising profiles, sell or transfer it to third parties, or use it for any purpose unrelated to providing the DropQueue service. Our use complies with the Google API Services User Data Policy, including the Limited Use requirements.

We keep personal data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time (see "Your rights").

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. Fans on a brand's waitlist should also contact that brand directly.

We use industry-standard measures — encryption in transit, row-level security on our database, and least-privilege access — to protect your data. No method of transmission or storage is ever 100% secure, but we work hard to safeguard your information.

DropQueue is operated globally and your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

The Service is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated to you.

Questions about privacy? Email us at hello@dropqueue.cc.

See also our Terms of Service.