Last updated 7 October 2026
This policy covers the website drop-list.com, run by Droplist LTD, registered in England and Wales. The Droplist app for iOS and Android has its own app privacy policy. The website has no account and no sign-up.
Delivering the site
drop-list.com is served through Cloudflare, which processes your IP address and standard request details to deliver pages quickly and to protect the site from abuse. When Cloudflare checks that a visitor is not a bot it may set a short-lived security cookie; apart from that, the website sets no cookies or advertising trackers.
Counting visits
We measure visits with Fathom Analytics, a privacy-focused service that uses no cookies and does not identify you or track you across other sites. It records the page viewed, the referring site, the country, the browser and the type of device, and which buttons were used, nothing more. Your IP address is used only momentarily to tell unique visits apart and is not stored, and we see totals, never individuals. Fathom's own policy is at usefathom.com/privacy.
App links and downloads
The download buttons, Follow and Open in app buttons and QR codes on the site are AppsFlyer links (app.drop-list.com). When you use one, AppsFlyer records the click, your IP address and device type, so that if you install the app it can open the product you came from.
Retailers and other services
Links to retailers and StockX are usually affiliate links, as described in our Terms. Each carries a reference telling the affiliate network that the click came from Droplist, so that a commission can be paid. It does not identify you. Once you land on the retailer's site, the retailer and the network handle your data under their own privacy policies, and they may set their own cookies. Retailer logos are loaded from Logo.dev, and messages sent through the contact form are delivered to us by email through Cloudflare and kept in our inbox so we can reply.
Droplist in ChatGPT and Claude
Droplist can be added to AI assistants such as ChatGPT and Claude through our MCP server at mcp.drop-list.com (see drop-list.com/mcp). It has no account or sign-in. When you ask a sneaker question, the assistant sends the server only what it needs to answer: the search words, and if you gave them, a size, a budget, your region (UK, Europe or US) and the ids of raffles it has already shown you. It never receives your conversation, your name or your account details. The server keeps no log of requests. It only counts how often each tool is used, with the country and which assistant asked, so we can see how much it is used; those counts cannot identify you and are deleted after three months.
The server reads Droplist's public release and stock data and returns release dates, prices and shop links. We do not keep what is asked: request logging is switched off and nothing is stored. Requests pass through Cloudflare, which processes your IP address and request details to deliver them and to block abuse. The cards shown in the chat load product images and shop logos from our image host and Logo.dev. Your conversation itself is handled by the assistant's provider under its own privacy policy. Shop links are the same affiliate links described above.
Why we are allowed to do this
Under UK GDPR our lawful basis for delivering the site and running the contact form is that it is necessary to provide what you asked for. For counting visits, measuring app link clicks and counting how the MCP server is used, it is our legitimate interest in understanding how the site and the server are used, balanced against the minimal or aggregated nature of the data.
Your rights
You have the right to ask what personal data we hold about you, to have it corrected or deleted, to restrict or object to its use, and to receive a copy of it. Contact us through the contact page. You can also complain to the Information Commissioner's Office at ico.org.uk.
Changes
We may update this policy. The version published on this page is the one that applies.