Privacy Policy

This Privacy Policy explains what information CodeDrop.mv ("CodeDrop", "we", "us") collects, why, and how we protect it.

• Account details: full name, email address, phone number, and password.
• Order details: items purchased, order total, and order history.
• Payment slips: a photo or screenshot of your bank transfer receipt, uploaded per order.
• Identity documents: for orders over MVR 500, a one-time photo of your National ID or Passport, used solely to verify your identity and prevent fraud.

We use your information to:

• Create and manage your account
• Process orders and verify payments
• Deliver gift card codes to your account
• Prevent fraud and abuse
• Send account-related emails (sign-up confirmation, password resets, email changes)
• Respond to your support requests

We don't sell your information to anyone, and we don't use it for advertising.

Payment slips and identity documents are stored in private, access-controlled storage that only our admin staff can view — they're never public. Admin accounts are required to use two-factor authentication to access this data. Your password is never stored in plain text.

We rely on a small number of trusted providers to run CodeDrop:

• Supabase — hosts our database, authentication, and file storage.
• Resend — delivers account-related emails (sign-up confirmation, password resets).
• Vercel — hosts the CodeDrop website.

These providers process your data only to the extent needed to provide their service to us, under their own privacy and security practices.

We keep your account and order information for as long as your account is active, and for a reasonable period afterward to meet our own record-keeping and legal obligations. Payment slips and identity documents are retained only as long as needed for the order or fraud-prevention purpose they were collected for.

You can view and update your profile details anytime from Account Settings. To request a copy of your data, or to request that we delete your account, contact us at support@codedrop.mv. Some information may need to be retained where we have a legal or financial record-keeping obligation to do so.

We use cookies only to keep you signed in and to remember your cart — not for advertising or third-party tracking.

CodeDrop isn't intended for use by children without the involvement of a parent or guardian. See our Terms & Conditions for our age requirements.

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above whenever we do.

Questions about this policy or your data? Reach us at support@codedrop.mv or via Viber (see the footer below).