HexDrop Privacy Policy

Last updated: May 2026 (v1.1.0)

HexDrop Free

The free version of HexDrop collects no personal data. Files you open are read directly by your browser and processed entirely within your local tab. No file contents, file names, or metadata are sent to any server.

HexDrop Pro (Optional Paid Upgrade)

The optional Pro tier ($4.99 one-time payment) unlocks themes, bookmarks, annotated regions, hash calculator, pattern wildcards, and diff mode. To support Pro, the extension collects and stores a small amount of data:

• Email address — provided to ExtensionPay (our payment partner) when you purchase Pro. ExtensionPay uses this email to deliver a license confirmation and validate your Pro entitlement on future launches.
• License token — a small token returned by ExtensionPay after a successful purchase, stored locally in chrome.storage.local so the extension remembers you have Pro without asking you to log in.
• Theme preference — the name of the color theme you've selected (e.g. matrix), stored locally.
• Bookmarks — for files you bookmark, the extension stores: a SHA-1 hash of the file content, the byte offset you bookmarked, and any optional note you typed. The actual file content is never stored or transmitted. The hash is one-way and cannot be reversed to reconstruct the file.
• Annotations — for byte ranges you annotate, the extension stores: a SHA-1 hash of the file, the start and end byte offsets, your label text, and your chosen color. As with bookmarks, only the hash of the file is stored, never the file content.
• Custom theme palette — if you create a custom theme, your three picked colors (background, accent, text) and the derived full palette are stored locally so the theme persists across sessions. No file data involved.
• Structure template text — the most-recent structure template you typed into the Structures panel is saved locally so it's there next time you open the panel. Just text — your field type declarations and field names. No file data.

Features That Use No Storage and No Network

The following Pro features run entirely in your browser tab and store nothing, send nothing:

• Hash calculator — SHA-256, SHA-1, and CRC32 of the full file or a selection are computed locally via the browser's Web Crypto API. Hashes are shown on screen and never persisted to storage or transmitted.
• Pattern wildcards — searching with ?? wildcards is purely a local computation against the file you've already loaded. No data leaves the page.
• Diff mode — both files compared in diff mode are read locally via the browser's FileReader API. They are held in memory only while the comparison is open, never persisted, never transmitted. The Export Patch feature creates a downloadable text file on your device listing the differences; nothing is uploaded.
• Value decoder — decodes the bytes you've selected as int / float values. Pure local computation; no storage, no network.
• Structure templates — applies a structure template to bytes at the chosen offset and renders the decoded fields on screen. The template TEXT is saved (see Pro storage above); the file bytes and decoded values are not stored or transmitted.

Network Activity

HexDrop Free makes zero network connections. It is fully offline.

HexDrop Pro makes one type of network connection: to https://extensionpay.com/*, used solely to verify your Pro license is active. No file data is ever sent — only the license check.

Payment Processing

Payments are processed by ExtensionPay (extensionpay.com/privacy) in partnership with Stripe (stripe.com/privacy). HexDrop never sees, stores, or has access to your credit card information, bank details, or full billing address. Refer to those services' policies for their data practices.

Limited Use Disclosure

HexDrop's use of any data collected through Pro license validation adheres to the principle of limited use: data is used only to validate the license, not for advertising, profiling, training AI/ML models, or any purpose unrelated to providing the Pro features.

What HexDrop Does NOT Do

HexDrop has no analytics, no tracking pixels, no crash reporting, no telemetry, no advertising SDKs, and no third-party data brokers. The Pro license check (when you've purchased Pro) is the only network connection the extension makes.

Permissions

HexDrop requests only one Chrome permission: storage, used to remember your Pro license token, theme preference, bookmarks, and annotations locally on your device. The extension does NOT request the tabs permission and does not read any other tab's URL, content, or browsing history. The extension declares extensionpay.com as a content-script host so that ExtensionPay can confirm a successful purchase back to the extension; this script runs only on extensionpay.com pages, never on any other site.

Data Retention & Deletion

To delete all local HexDrop data: uninstall the extension from chrome://extensions. To delete your ExtensionPay account: contact support@extensionpay.com.

Changes to This Policy

If this policy changes, the updated version will be published at the same URL with a new "Last updated" date.

Contact

Questions or requests about your data: hexdrop.support@gmail.com. Response within 48 hours.