Privacy Policy

Summary in one paragraph

Next AI Drop is a free, read-only AI release timeline that collects no personal data through tracking cookies, runs only cookieless and aggregate analytics, never sells or shares data for advertising, and processes only the minimal server and security data needed to keep the site online — all under the GDPR legal basis of legitimate interest.

There is no account, no login, and no form to fill in. You read the timeline; nothing about you is profiled, fingerprinted, or followed across other sites. The rest of this page documents each of those statements in plain terms so the lawful basis for every choice is on the record.

Who is the data controller

The data controller is Next AI Drop, operated as a solo project by one individual based in Amsterdam, Netherlands. For any privacy question or request, the contact address is hello@nextaidrop.com. Because the processing here is low-risk and small-scale — no special-category data, no large-scale monitoring — no Data Protection Officer is appointed, which the GDPR permits for an operation of this size.

If you want context on the person and the project behind this site, see who is behind Next AI Drop.

What data we collect

Next AI Drop collects two narrow categories of data and nothing else. Neither category builds a profile of you, and neither follows you to other websites.

• Cookieless aggregate analytics. Cloudflare Web Analytics counts page views and records coarse, anonymous signals — referring site, approximate country, and broad browser or device type. It uses no cookies and assigns no cross-site identifier, so individual visitors cannot be re-identified or singled out.
• Server and security logs. The hosting and CDN layer keeps standard request logs that may contain an IP address, a user-agent string, and a timestamp. These are held briefly and used only to keep the site available and to detect and stop abuse.

What is explicitly absent: no account or login, no contact or sign-up forms, no behavioural tracking across sites, no advertising data, no profiling, and no automated decisions made about you.

Why we process it (purposes and legal basis)

The legal basis for all processing on this site is legitimate interest under GDPR Article 6(1)(f) — running, securing, and improving a free informational resource — and that interest is weighed against your rights and freedoms, which the cookieless design protects by default.

The purposes are deliberately limited: measure aggregate audience so the timeline covers what builders actually read; keep the site secure and available against abuse; and improve the content and structure over time. Because no non-essential cookies and no trackers are set, the balancing test favours the user and no consent banner is required to carry out these purposes.

Cookies

This site sets no tracking, advertising, or analytics cookies. The only cookies you may encounter are strictly-necessary security and performance cookies set by the hosting and CDN layer to keep the service reachable and to defend against attacks; these are consent-exempt under the ePrivacy rules because they are essential to deliver the page you requested.

For the full reasoning — including why there is no cookie consent banner — read the full cookie policy.

Who else processes data (third parties)

Cloudflare is the single third party that processes data on behalf of Next AI Drop, acting as the hosting, CDN, security, and cookieless-analytics provider. No other processor touches your data, and the site integrates no advertising networks, social pixels, or data brokers.

Some of this processing may occur on infrastructure outside the European Economic Area. Where that happens, the transfer is covered by an appropriate safeguard — the EU-US Data Privacy Framework and, where applicable, Standard Contractual Clauses. To be explicit: Next AI Drop does not sell, rent, or share personal data with advertisers or data brokers, full stop.

How long we keep data

Data is kept only as long as its purpose requires, and the windows are short. Aggregate analytics are retained on a rolling basis of a limited number of months and then roll off; because they are aggregate and cookieless, they cannot be tied back to an individual at any point. Server and security logs are retained only briefly for abuse prevention and are then discarded.

Your rights under the GDPR

You hold the full set of data-subject rights under the GDPR: access, rectification, erasure, restriction of processing, objection, and data portability, plus the right not to be subject to automated decision-making — of which none occurs on this site. To exercise any right, email hello@nextaidrop.com.

One honest caveat: because Next AI Drop holds only aggregate, non-identifying data, several requests may not be actionable in practice. There is simply no record tied to you to retrieve, correct, or delete — which is the point of the cookieless design.

Complaints to a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. In the Netherlands that authority is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). If you are resident elsewhere in the EU, you may instead complain to your local data protection authority. Raising a concern with hello@nextaidrop.com first is welcome but never a precondition for contacting a regulator.

Changes to this policy

This policy may be updated as the site evolves. When a material change is made, it is reflected by updating the "Last updated" date at the top of this page, so that date is the authoritative version marker. For a running record of notable site changes, see the record of site changes.

This is general information, not legal advice

This page describes how Next AI Drop handles data and is published for transparency; it is general information, not legal advice, and it does not create any client relationship. For your own obligations, consult a qualified adviser.

Last updated 29 May 2026