Last updated: 31 July 2026
One Drop is operated by Little Spring NGO, a non-governmental organization based in Mongolia. This policy explains exactly what the app stores, what it never collects, and how to remove your data.
There is no advertising, no analytics or tracking pixels, and nothing is ever sold or shared for marketing.
You can use One Drop without signing in. In that case no account exists and nothing identifies you.
Stored in your own browser only:
Clearing your browser storage for this site erases all of it.
Stored on our servers: each tap writes a single row containing a two-letter country code and a timestamp. That row carries no user ID, device ID, session ID, or IP address, so it cannot be traced back to you or to any other tap. It exists only to produce the global and per-country totals and the daily charts on the home screen.
To label your tap with a country, your browser makes a request to the third-party lookup service ipwho.is, which returns a two-letter country code. That request goes directly from your browser to their service, so they see your IP address and we do not. We receive and store only the resulting country code — never your IP address, and never a precise location.
If the lookup fails or is blocked, we fall back to the country implied by your browser language setting.
Signing in is entirely optional and exists for one purpose: backing up your lifetime tap count so it survives a cleared browser or follows you to another device. You can use every feature of One Drop without it.
Authentication is handled by Supabase. If you sign in, we store:
A session token is kept in your browser storage to keep you signed in. Signing out removes it.
If you choose “Continue with Google”, we request only the basic scopes Google calls openid, email, and profile. We never see or receive your Google password, and we have no access to Gmail, Drive, Contacts, Calendar, Photos, or any other Google service or data.
Information received from Google is used solely to sign you in and to associate your tap-count backup with you. It is never sold, never used for advertising or profiling, and never transferred to anyone else except as needed to run the service or where required by law.
We rely on Supabase for the database and authentication, on our web hosting provider to serve the site, and on ipwho.is for the country lookup described above. They process data only to provide those functions. We use no advertising networks and no analytics services.
Anonymous tap rows are kept indefinitely, because they form the historical record behind the charts. They contain nothing that identifies anyone, so they cannot be attributed to you and cannot be selectively removed.
Account data — your email address and your tap-count backup — is kept until you ask us to delete your account.
One Drop is not directed at children under 13, and we do not knowingly create accounts for them. If you believe a child has signed in, contact us and we will remove the account.
If this policy changes, the “last updated” date above changes with it. Material changes to how we handle account data will also be announced in the app.
One Drop is a project by Little Spring NGO. Questions about this page: developer@littlespring.org