What we collect

• Account info — your email address, and optionally your name. We do not collect phone numbers.
• Notification preferences — which brands you follow and which channels (email, push) you've enabled.
• Push subscription data — a browser-generated endpoint that lets us send push notifications to your device. It contains no personal details.
• Signup context — when you follow a brand we may record the source (e.g. QR code or link), your device type, and an approximate location (city/region) derived from your IP address, so brands can see how followers found them. We do not track your precise location.
• Engagement — whether alert emails were opened and links clicked, so brands can see how their drops perform. Brands see these as per-drop totals only, never tied to an individual follower.
• For brand accounts — business details, the content and photos you post, and tokens for social accounts you choose to connect (Facebook, Instagram, Discord). Payment details are handled entirely by Stripe — we never see or store card numbers.
• Cookies — session cookies to keep you logged in, a 30-day cookie when you arrive through a brand's referral link (so we can credit that brand), and Google Analytics cookies for anonymous usage statistics. No advertising cookies, and we never sell data collected through cookies.

How we use it

To deliver the alerts you subscribed to, let brands you follow manage their audience, process brand subscription payments, keep the service secure, and comply with the law. That's it — we don't sell or rent personal information, and we don't use it for third-party advertising.

Who we share it with

• Brands you follow — a brand never sees your email address. Kato Drop sends every alert on their behalf, so what a brand can see is the name or @username you chose (or just an anonymous "Subscriber #" if you gave neither), which channels you've enabled for them and whether your email is confirmed, and how you found them (source, device type, approximate city). Reactions and comments you leave appear under that same name. Brands can't export their follower list, and a brand still awaiting verification sees only the anonymous numbers.

Beyond that, only service providers who help us run Kato Drop, and only what they need to do their job:

• Amazon SES — sends our email alerts.
• Stripe — processes brand subscription payments.
• Meta / Discord — when a brand connects Facebook, Instagram or Discord, their drops are posted to those platforms on the brand's behalf. Follower data is never shared with them.
• Hosting providers — our infrastructure and content delivery partners store data on our behalf.
• Cloudflare Turnstile — protects our forms (sign-up, subscribe, login) from bots and abuse. Turnstile processes limited technical signals — such as your IP address and browser characteristics — to tell real people from automated traffic, and does not use that data for advertising. See Cloudflare's Turnstile Privacy Addendum.

We may also disclose information if required by law, or as part of a business transfer (we'd notify you).

Your choices

• Every alert email includes a one-click unsubscribe link for that brand.
• Turn channels on or off any time in your notification settings, or revoke push permission in your browser.
• Delete your data — if you have a login, delete your account from your profile page. If you only subscribed by email (no account), the unsubscribe link in any of our emails leads to a one-click "delete all my data" option. Either way your personal information is removed from our systems.

Retention & security

We keep your information while your account is active and delete or anonymize it when you delete your account, except records we're required to keep (like payment history). Data is encrypted in transit, and sensitive credentials (like connected social account tokens) are encrypted at rest.

Children

Kato Drop is not directed at children under 13, and we don't knowingly collect their information.

Changes & contact

If we make meaningful changes to this policy we'll update the date above and, for significant changes, notify you by email. Questions or requests about your data: [email protected].

Lysne Software LLC, d/b/a Kato Drop · Mankato, MN