Privacy Information

General Information

ImageDrop collects no personal data about you except from your IP address and file details if you choose to upload a file.

ImageDrop does not guarantee any degree of security for your uploaded files. Even though your file has a random filename generated it is still possible to guess a URL. If anyone guesses the URL that is generated for your file, they have full access.

imagedrop.xyz does not have any SSL encryption either ('http://' instead of 'https://'), meaning that any transferred data between your IP and the web server can be theoretically intercepted and viewed unencrypted by a skilled attacker, including images uploaded and passwords submitted. IT IS NOT RECOMMENDED TO UPLOAD FILES CONTAINING INFORMATION YOU CONSIDER TO BE SENSITIVE.

Database & Login Information

Both User Login's and Uploads associated with an account are stored in our SQL Database. Usernames are stored as plain text, and passwords are first hashed using the PHP "password_hash()" function, which itself uses the bcrypt hashing algorithm (bcrypt Wikipedia).