Privacy Policy — drop.

Last updated: June 14, 2026

This Privacy Policy explains how drop. (droprunn.ing) processes the personal data of users who visit the website.

This Policy is provided in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection laws.

1. Data Controller

The Data Controller may be contacted at:

info@droprunn.ing

The website is currently operated as a personal project and not as an e-commerce business. drop. does not directly sell products and does not handle payments, shipping, or returns.

2. What Data We Process

When you use the website, we may process the following categories of data.

Browsing Data

The technical systems required to operate the website may automatically collect certain information, including IP address, user agent, date and time of requests, pages visited, technical logs, and information relating to the browser or device used.

These data are necessary for website operation, security, abuse prevention, and troubleshooting.

Preferences Stored on Your Device

The website may store a browsing preference, such as a Men / Women preference, through a technical cookie named drop_gender.

This preference is used solely to improve the browsing experience and is not used for advertising profiling.

Aggregated Analytics

The website may use traffic analytics tools, such as Cloudflare Web Analytics, to understand in an aggregated manner how the website is used.

According to the current configuration, Cloudflare Web Analytics does not use cookies and does not directly identify individual visitors.

Clicks to Third-Party Retailers

When you click on an offer or a link to a partner retailer, we may record aggregated information regarding outbound clicks, for example to measure which offers are being viewed and for affiliate attribution purposes.

Any purchase is completed on the third-party retailer’s website, which will process your data in accordance with its own Privacy Policy.

Account Data and Price Alerts

If you choose to create an account, we process your email address. Access is provided without a password through a one-time code sent by email.

We use your email address exclusively for:

  • authentication purposes (sending login codes); and
  • sending price alerts that you have requested by saving a shoe.

We do not use your email address for marketing purposes and we do not share it with third parties for commercial purposes.

We also process the list of shoes you save and the related price at the time of saving, solely for the purpose of displaying your saved list and notifying you when prices decrease.

Account data are retained for as long as the account exists.

You may delete your account at any time through the account menu (“Delete Account”). Deleting the account removes your email address, saved shoes, alerts, and active sessions.

Alternatively, you may contact us at:

info@droprunn.ing

3. Purposes and Legal Bases for Processing

We process personal data for the following purposes:

  • operating the website;
  • protecting the website against abuse, bots, attacks, or misuse;
  • remembering technical or functional user preferences;
  • analyzing website usage in aggregated form;
  • measuring clicks to retailers or affiliate partners;
  • responding to requests submitted by users;
  • sending communications, newsletters, or price alerts only when requested by the user.

The legal bases for processing are, depending on the circumstances:

  • our legitimate interest in operating, securing, and improving the website;
  • the performance of a contract or pre-contractual measures requested by the data subject (Article 6(1)(b) GDPR), including account management and the delivery of requested price alerts;
  • the user’s consent, where required, for example in relation to newsletters or any non-essential tools;
  • the performance of a request submitted by the user when the user contacts us or requests a specific service;
  • compliance with legal obligations, where applicable.

4. Provision of Data

Technical browsing data are necessary for accessing and operating the website.

Providing an email address or other information through forms, newsletters, or alerts is optional. If you choose not to provide such information, we may be unable to respond to your request or provide the specific service requested.

5. Data Retention

Technical data and logs are retained for the period necessary to operate, secure, and maintain the website, and in any event only for a limited period consistent with those purposes.

Aggregated analytics data do not directly identify individual users.

Email addresses and account-related data (including saved shoes and alerts) are retained for as long as the account exists and are deleted when the account is removed.

Email addresses collected for future newsletters, where applicable, will be retained until consent is withdrawn or the subscription is cancelled.

Where necessary, certain data may be retained for longer periods in order to comply with legal obligations or protect the rights of the Data Controller.

6. Recipients of Personal Data

Personal data may be processed by technical service providers necessary for operating the website, including providers of hosting, CDN, security, analytics, email, or technical infrastructure services.

In particular, the website may use services provided by Cloudflare, Inc. for security, performance, content delivery, and aggregated analytics.

For sending login codes and price alerts, we use Resend, Inc. (resend.com) as our email delivery provider, configured on infrastructure located in the European Union (Ireland).

Resend processes recipients’ email addresses and the content of service-related messages on our behalf as a Data Processor.

Links to third-party retailers or affiliate networks may involve separate processing activities carried out independently by those parties in accordance with their respective privacy policies.

We do not sell users’ personal data.

7. International Data Transfers

Some technical service providers may be located outside the European Economic Area (“EEA”) or may process data outside the EEA.

Where this occurs, transfers are carried out using the safeguards provided under the GDPR, including adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms recognized under applicable law.

8. Cookies and Similar Technologies

The use of cookies and similar technologies is described in the website’s Cookie Policy.

According to the current configuration, the website uses only technical cookies and aggregated analytics tools that do not require prior consent.

If profiling cookies, marketing cookies, or non-anonymized analytics tools are introduced in the future, users’ consent will be obtained before such tools are activated.

9. Children

The website is not specifically directed at children and does not knowingly collect personal data from children.

10. Your Rights

You may exercise the rights granted under Articles 15–22 GDPR, including:

  • the right of access to personal data;
  • the right to rectification of inaccurate data;
  • the right to erasure, where applicable;
  • the right to restriction of processing;
  • the right to object to processing;
  • the right to data portability, where applicable;
  • the right to withdraw consent where processing is based on consent.

To exercise your rights, please contact:

info@droprunn.ing

You also have the right to lodge a complaint with the competent data protection authority.

11. Updates

This Privacy Policy may be updated from time to time, for example following technical changes to the website, the introduction of new features, or regulatory developments.

The latest version will always be published on this page together with its last updated date.