Last updated: September 29, 2026
This Privacy Policy explains how DukeDrop (“DukeDrop,” “we,” “us,” or “our”) handles information in connection with the DukeDrop website and delivery services. DukeDrop is an independent, student-run service and is not affiliated with or endorsed by Duke University.
Information you provide
When you use the order desk, you may enter information needed to arrange a delivery, including your phone number, dorm and room, service and item counts, carrier and tracking or order numbers, and (for relevant pickups) your name, mailroom or locker location, box number, locker code, and promo code. The information requested depends on the service you select. Please provide only information needed for your order, and do not send us passwords or unrelated sensitive information.
What happens to order form information
The order form uses your entries to calculate the displayed price and prepare payment instructions. When order storage is enabled, submitted order details are stored in a restricted-access Supabase database for authorized DukeDrop staff to fulfill orders, provide support, and administer order and payment status. Saving an order does not confirm payment.
When carrier tracking is enabled, we send the carrier and tracking number to EasyPost to receive shipment status and delivery updates. We use these updates to coordinate pickup readiness. Locker codes, phone numbers, and dorm or room details are not sent to EasyPost by this tracking integration.
Payment apps and messages
If you choose to pay through Venmo or Zelle, the order desk prepares a payment note using some order details, such as service, quantity, dorm and room, and where relevant tracking information or pickup details. You choose whether to open the payment app and send the payment. Venmo, Zelle, and your bank process information under their own privacy policies and terms; DukeDrop does not control their handling of it.
For mailroom pickup consent, the site can open a prefilled text message when you select the text link. Your device and mobile carrier handle the message, and it is sent only when you choose to send it. You may also contact DukeDrop through Instagram; Instagram handles information you share there under its own policies.
Website operations and third parties
The website loads fonts from Google Fonts and links to third-party services, including payment apps and Instagram. Those providers may receive technical information such as your IP address or browser details when your device requests their content or you follow a link. The site is configured for deployment on Vercel, which may process routine connection and security logs to operate the website. Please review the relevant providers’ privacy information for details about their practices.
We do not see analytics or advertising tracking code in the current site implementation. This statement describes the site code and may not cover technical processing by hosting, security, or linked service providers.
How we use information
We use information you provide to prepare a requested order, deliver or return packages, obtain required pickup authorization, communicate with you about service issues, and address questions or refund requests. If order storage is enabled, we may also use stored order information to administer fulfillment and payment status.
Disclosure
We do not sell your personal information. We may share relevant details with service providers that help operate the website or complete an action you request, such as hosting, payment, messaging, or social media providers, and with authorized DukeDrop staff when needed for fulfillment or support. We may also disclose information where required by law or reasonably necessary to protect people, rights, or the service.
Retention and security
Stored order details and tracking updates are kept for operational records. Details may also remain in your browser, device, payment app, text messages, Instagram messages, or provider logs according to those providers’ settings and retention practices. You can contact DukeDrop about access to or deletion of stored order information.
We use reasonable measures appropriate to the current service, but no website or electronic transmission can be guaranteed completely secure. Avoid sending locker codes or other access details through public channels.
Children’s privacy
DukeDrop’s services are intended for people age 18 or older. We do not knowingly seek personal information from children under 13. If you believe a child has provided information to DukeDrop, contact us so we can review the situation.
Your choices and questions
You can choose not to provide optional information, though we may be unable to complete a service without details necessary to identify or deliver a package. For questions or a request about information you have shared with DukeDrop, message @dukedrop_ on Instagram. We may need to verify that a request relates to you before responding.
Changes to this Policy
We may update this Policy as our services or information practices change. We will post the current version on this page and revise the “Last updated” date. Changes apply from the date posted.
Contact
For privacy questions, message @dukedrop_ on Instagram.