Publish-time checks
HTML and Markdown pass validation, size limits, and automated moderation before going live.
Security
Built for sharing,with guardrails
Validation, sanitization, moderation, and password protection — so you can share links with confidence.
Markdown sanitization
Markdown compiles through GFM parsing and HTML sanitization — scripts and unsafe tags are stripped.
Password-protected pages
Pro users can gate hosted pages with a password. Unlock tokens are signed server-side.
Abuse reporting
Anyone can flag a page. Reports are reviewed and violating content may be removed without notice.
How hosted pages work
HTMLDrop serves static HTML at /p/[slug]. Client-side JavaScript runs in the visitor's browser — the same model as a typical static host. Server-side code (Node, Python, PHP backends) does not execute on our platform.
HTML mode stores and serves your markup as provided (subject to validation and moderation). Markdown mode compiles to HTML on publish, applies a page template, and serves the compiled result.
Data storage & retention
Page content and account data are stored in managed cloud infrastructure (PostgreSQL via Supabase). Anonymous guest pages expire after 24 hours unless claimed to a signed-in account.
Signed-in pages persist under your plan limits. Version history keeps prior publishes for rollback. See our Privacy Policy for collection and retention details.
Authentication
Account sign-in supports email magic links and GitHub OAuth through Supabase Auth. API access for automation uses revocable API keys tied to your account (Pro plan when billing is enforced).
Moderation & enforcement
Automated filters scan for known abuse patterns at publish time. User reports via /report trigger manual review. We may remove pages, suspend accounts, or escalate illegal content to authorities. Full rules are in our Acceptable Use Policy.
Operational status
Live service health is published at /status. HTMLDrop is provided as-is during early access — see Terms of Service for disclaimers.
Security review or questionnaire?
Contact us for vendor security reviews, procurement questions, or responsible disclosure.