testdrop.
THE FINE PRINT
PRIVACY & DATA

Simple, on purpose.

TESTDROP helps creators run small opinion tests. Here's how the service handles data.

What we store

When you create a test, we store its question, options, optional compressed images, creation date and a hashed copy of your private management key. Voting records include the selected option, timestamp, an anonymous cookie-based identifier and a short-lived keyed network hash for basic abuse limiting. If you opt into an interest list, your email address is stored and visible to that test's creator.

Private written feedback

After voting, you can leave one optional comment, up to 300 characters. It is linked to your anonymous voting identifier and selected option, and is visible only to the creator. It is not published or used to subscribe you to anything. Creators can export comments. Deleting a test removes its stored comments, but cannot undo prior exports. Do not include personal information.

Operator access

Authorized operators can review test content, reports and website feedback using Cloudflare Access. Moderation actions record the operator email, action and date for accountability. The operator can access stored data when needed to run the service or handle a privacy request. Approved public tests may be selected for indexing after a quality review; unlisted tests are excluded.

Who can see what?

Anyone with a voting link can see the public question and options. The creator chooses when aggregate results become visible: live, after voting, after closing, or creator only. Public tests appear in Explore after review. Unlisted tests are accessible by link and excluded from discovery. Only someone possessing the separate, unguessable private management link can open the creator dashboard, view interest-list emails or delete a test. Keep that private link secret.

Purpose and choices

We use the data to provide voting, creator analytics, optional email-interest collection, and protection against repeat or automated submissions. You can vote without giving an email address. Email opt-in is voluntary; the test creator can use it for updates about that specific idea, not unrelated promotions.

Browser storage and cookies

We use localStorage to remember your own tests and an essential, first-party voting cookie to limit duplicate votes. There are no third-party ad trackers in this version. Clearing local browser data may remove your saved management shortcuts, so retain your private link.

Data deletion and limitations

Creators can delete their entire test, votes and interest submissions using the private dashboard. Deleting it cannot undo a previous export or a message already received by the creator. If you gave an email address and want it removed, ask the creator to delete the test or their exported record. Avoid submitting private or sensitive information in test questions or images. Do not post illegal, abusive or infringing content. Public tests can be reported through the voting page for review. This is an early experimental service: do not use it for regulated or high-stakes research.

Feedback and reports

We store feedback messages, their type and optional contact email, plus test reports for operator review. These are not public. Data remains until the creator deletes a test or the operator removes it; rate-limit records are periodically cleared after 48 hours. The essential voting cookie lasts up to one year. Clearing cookies can permit another vote: this is not one-person-one-vote verification.

Service contact

We currently don't provide a public support mailbox. The feedback form can receive a general request, but it should not include personal financial, health or identity information. This is not a substitute for a verified privacy-request contact channel; establish one before promoting TESTDROP publicly at scale.

Last updated

October 2026