THE DETAILS, IN PLAIN ENGLISH
A useful record.
Clear limits.
Service terms
DropMake Copyright supplies a record of submission of a SHA-256 fingerprint for £1 GBP. Your browser calculates the fingerprint. We never receive the original file or its filename. Payment is handled by PayPal. A receipt is issued only after we verify a completed capture for the expected merchant, amount and submission.
The submission time and receipt time are separate UTC times from the DropMake server clock. Neither proves when the underlying work was created. No independent timestamp authority is used for this tier. Certificates are downloadable text documents and are not digitally signed.
This is not copyright registration, legal advice, proof of authorship or ownership, or a guarantee of admissibility or success in court. Copyright protection may arise automatically; this service does not grant rights. Anyone who has a file can submit its fingerprint. Keep other evidence of your creative process.
Keep your exact original, certificate and backups. Changing a single byte changes the fingerprint. We aim to keep paid records available while operating this service, but do not promise perpetual hosting. An offline receipt cannot independently prove its date if our records are unavailable or compromised.
By checking the agreement you request immediate performance of this digital service. Your statutory consumer rights remain unaffected. For failed delivery, duplicate charges, cancellation questions or refunds, contact the operator with your reference or PayPal transaction ID. Do not pay again to recover an interrupted checkout: use “Recover my previous payment” in the same browser tab.
Privacy notice
We process the fingerprint, a random reference, submission and receipt times, payment order and capture identifiers, a hashed recovery token and receipt delivery status to fulfil the service and verify records. We do not store filenames, file contents, PayPal payer profiles or card details. Fingerprints can reveal whether a known file was submitted, so treat your reference and certificate as private unless you intend to share them.
An optional email address is encrypted at rest until the receipt delivery attempt and then removed, whether sending succeeds or fails. Uncompleted checkout records and residual email addresses are deleted after seven days by the documented maintenance task. Paid records are retained while the service operates to enable verification; payment identifiers may need to be retained for accounting and disputes. Contact the operator to discuss access, correction or deletion and the effect on verification.
PayPal separately processes payment and payer data under its own privacy terms. The configured SMTP provider processes receipt delivery. Hosting infrastructure and IIS may log IP addresses and request details for security. The operator must set and disclose a short log retention period. No advertising, analytics or non-essential cookies are used. Browser session storage holds your checkout recovery reference and secret for this tab; closing the tab can remove it.
We rely on contract performance for service data and optional receipt delivery, and legitimate interests for proportionate security records. Where accounting retention is required, legal obligations apply. Contact the operator about your data rights or complain to the UK Information Commissioner’s Office. Provider locations, international transfers and the operator’s actual log retention must be specified before accepting live payments.
Independent timestamps
The premium option is unavailable. A provider, pricing, validation policy, retention policy and integration must be selected and implemented before it is enabled. RFC3161 describes a timestamp protocol; it does not by itself mean a service is qualified or has guaranteed legal status.
Operator & contact
Operator details have not yet been configured. Checkout stays unavailable until these details are supplied.
Before live launch, the operator must provide their full trading identity, service address, contact details, actual privacy provider and retention information, and applicable consumer terms. These notices describe the supplied implementation and must be reviewed for the operator’s circumstances.