Effective November 7, 2026 · Just Brands, LLC
Just Drops (justdrops.com, justdrops.app, and the Just Drops app) is operated by Just Brands, LLC, a New York limited liability company (“we”, “us”). This policy explains what we collect, why, who we share it with, and how to get it deleted. We have tried to write it in plain language rather than boilerplate.
If you create an account. When you sign in with Google, we receive your email address, name, profile picture, and Google account identifier. When you sign in with Apple in our app, we receive your Apple account identifier, the email address Apple shares with us (which may be a private relay address), and your name if you choose to share it. When you sign in with an email link, we store the email address you enter — including if you never finish signing in, because we have to record that a link was issued. You may optionally add a phone number to your profile.
What you save. Products on your watchlist and in your locker (including any sizes or notes you add), releases you mark as won, your wish lists (their names and notes, the items you add with any sizes or notes, and each list’s private link), your notification preferences, and your display settings (time zone and which stores to show first).
Wish lists. A wish list can be seen by anyone who has its link, together with your first name if your profile has one. When you add a link from a store, our server visits that page once to read the product’s name, photo and price, and may turn the link into an affiliate link (see Affiliate links). People who open your list can mark an item as bought without an account: we store the first name they choose to type, if any, when they marked it, and a code that lets the same browser undo the mark; if they are signed in, the mark is linked to their account. You do not see who bought what unless you turn that on for a list; other people with the link do, so the same gift is not bought twice. You can replace a list’s link at any time, which stops the old link from working.
Country and time zone. To list the stores that sell where you are first and to show release times on your clock, we use your approximate country, which our hosting and security provider works out from your IP address, and your device’s time zone setting. If you have an account, we save that country to it the first time we see it while you are signed in, and it stays the same when you travel unless you change it. We also save your device’s time zone and update it when your device reports a new one. We save the two-letter country, not the IP address it came from. The country is an estimate and can be wrong, for example if you use a VPN; you can correct or remove it in your account settings. If you browse without an account, the approximate country is used for that visit and not saved.
Location for the store finder. Our store finder looks for stores near a city or ZIP code you enter or, if you choose “Use my location” and allow it in your browser or device settings, near your device’s current location. We only ask for your device’s location when you choose that option, never in the background. We use the place or location to answer that search and do not save it to your account. To find the place you typed and estimate driving distances, our servers send it to public map services. To make repeat searches faster, our servers keep those results for a short time, without your account or IP address. The map images load directly from a public map service, which receives your IP address and the area of the map you view.
Device and technical data. Your IP address (used for security, rate limiting, and diagnosing problems, and recorded in our server logs), browser and device information, and — if you enable push notifications — a push notification token for your device.
Usage data. Which pages are visited and how people find them, from our own aggregate counts and from Google Analytics (see Analytics below), and diagnostic reports when something errors. We do not record your screen or session.
Retailer businesses. If you claim a retailer profile, we collect the business email and details you submit through that form.
Advertising inquiries. If you use the form on our advertising page, we collect your company, contact name, email address, requested placement, and any website, budget, message, or follow-up correspondence you provide. Please do not include payment-card details or sensitive personal information.
We do not use your personal information to build advertising profiles, and we do not run behavioral advertising on this site.
We keep inquiry details in our business records so we can respond. Our service providers process them to deliver and protect that service. Submitting an inquiry does not subscribe you to release alerts or a marketing mailing list.
We offer placements based on the page or content where they appear, rather than a profile of your browsing across other sites. We do not give advertisers your email address, account information, watchlist, or subscriber lists. Any campaign reporting we agree to provide is aggregate information, not identifiable audience records.
Clicking an advertisement takes you to an advertiser or retailer whose own privacy policy applies. Affiliate links within an advertisement may also pass through an affiliate network, as described below. Paid placements are explained in our advertising disclosure.
We do not sell your data. We use service providers to run Just Drops, and they process data on our behalf and under our instructions:
Our store finder also uses public map services, which draw the map, look up the places you search for, and estimate driving routes. They receive the place or location of a search and, for map images, your IP address, and they handle it under their own policies.
We may also disclose information if we are legally required to, or to protect the rights and safety of our users or ourselves.
Many outbound links to retailers on Just Drops are affiliate links, and we may earn a commission when you buy through them. When you click one, the affiliate network and the retailer receive what your browser sends to any website, including your IP address, and may set their own cookies to attribute the sale. That happens on their side, under their privacy policies. We do not send them your name, email address, country, time zone, or any account identifier. See our Affiliate Disclosure for the full explanation.
We set a session cookie that keeps you signed in. Each visit extends it, and it expires after 90 days without one. It is strictly necessary for the site to work, and there is no way to use an account without it.
We do not use advertising or cross-site tracking cookies. The only analytics cookies are Google Analytics’, described under Analytics below, and you can switch them off.
We use Google Analytics to see how many people visit Just Drops, which pages they use, and how they found the site. It sets first-party cookies (named _ga and _ga_ followed by an ID) that recognize a returning browser for up to two years, and Google receives your IP address, browser and device information, and the pages you view. We have switched off Google Signals and ads personalization, so this data is not used for advertising or connected to a Google account.
Google Analytics does not run when your browser sends a Global Privacy Control or Do Not Track signal, and it does not set cookies for visitors in the European Economic Area, the United Kingdom, or Switzerland. You can also switch it off for this browser with the setting on this page; it stays off until you clear this site’s data. Google offers a browser add-on that blocks Google Analytics on every website.
Account data is kept while your account exists. Sign-in links and expired sessions are deleted automatically, and administrative records are kept only as long as we need them. If you ask us to delete your account, we delete it and everything attached to it, including your wish lists and the marks people left on them. Marks you left on other people’s lists stay on those lists, no longer linked to your account.
Advertising inquiries and related correspondence are kept while we handle the request or manage a resulting campaign, and afterward as needed for business records, legal obligations, or disputes. They are separate from account records, so deleting an account does not automatically delete an inquiry or its email correspondence. You can request access, correction, or deletion using the contact below; we may retain records where required by law or necessary for a dispute.
Whoever and wherever you are, you can ask us to show you the personal information we hold about you, correct it, or delete it. Email data@justdrops.com from the address associated with your account or inquiry, and we will respond within the time required by applicable law. You do not need an account to make a privacy request.
You can turn off any email or push alert from your account notification settings at any time, change or remove the country on your account and choose your time zone in your account settings, and turn off location access for Just Drops in your browser or device settings. Turning off alerts does not delete your account; you can delete it in your account settings or ask us to.
Visitors in the European Economic Area, the United Kingdom, and Switzerland. We use your information to provide the service you ask for (your account, alerts, and settings); for our legitimate interests in running, securing, and improving Just Drops, including using your approximate country to list nearby stores first; and with your consent where the law requires it, such as for your device’s location, which you can withdraw at any time. You also have the right to object to or restrict our use of your information, to receive a copy of it in a portable format, and to complain to your local data protection authority.
California residents. We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act, and we have not done so in the past 12 months. We do not knowingly sell or share the personal information of anyone under 16. You will never be treated differently for exercising a privacy right.
Browser privacy signals. Global Privacy Control (GPC) is a signal to opt out of sale or sharing of personal information where applicable. We do not sell or share your information for cross-context behavioral advertising, including when GPC is enabled. We also do not track you across other websites for behavioral advertising, whether or not your browser sends a Do Not Track signal. Either signal switches off Google Analytics.
We operate in the United States. Our service providers process data in the United States and in other countries where they operate. If you use Just Drops from outside the United States, your information is transferred to and processed in the United States, where privacy laws may differ from those where you live.
Just Drops is a general-audience service and is not directed to children under 13. You must be at least 13 years old to create an account. We do not knowingly collect personal information from children under 13; if we learn that we have, we delete the account and the data. If you are a parent or guardian and believe your child has created an account, email data@justdrops.com and we will remove it.
We use encrypted connections and limit who can access personal information. Just Drops accounts do not use passwords, so we never store one. No service can promise perfect security, but if a breach ever affects your information, we will notify you as required by law.
When we change this policy, we update the effective date at the top. For a material change, we also post a notice on the site when the change takes effect. We will obtain any consent required by law before using previously collected information for a materially different purpose.
Just Brands, LLC
418 Broadway, Ste N, Albany, NY 12207
data@justdrops.com
Questions about this document? Email data@justdrops.com.