Fineprint

If you like this, see what else we're creating.

Privacy policy

Dropbox

2026 Privacy Policy - Dropbox

C

Risk score

37of 100

Open the original (new tab)Company page

In short

  • You accept a policy that retains your deleted data for 30 days and keeps copies in backups or for legal disputes indefinitely.
  • Dropbox allows its administrators to access and control your account if you are part of a team, giving the organization visibility into your stored files and interactions.
  • The company may change this policy at any time, notifying you only if the changes significantly reduce your rights.

What you accept

If you use this site

Everyday words for the material promises and rights you give up. Each line includes a quote from the document.

Fineprint cannot see whether you agreed. This page is posted on their site. Open the original if you need to know how they say it applies.

  1. 01

    You are agreeing to allow Dropbox Teams administrators to view and control your account and files.

    This product

    “your administrator may have the ability to access and control your Dropbox Team account.”
  2. 02

    You are agreeing to retention of data in backups and for legal reasons even after deletion requests.

    This product

    “we may retain this information if necessary to comply with our legal obligations, resolve disputes, or enforce our agreements.”

What it can cost you

Downsides we could quote

Quoted clauses that can affect your privacy, money, or right to go to court — including terms that follow you to other products.

Highest-cost clauses first

High cost

Indefinite retention

You are agreeing to indefinite retention of your data if claimed necessary for legal or business purposes.

“If you delete your account, we’ll initiate deletion of this information after 30 days... (2) we may retain this information if necessary to comply with our legal obligations, resolve disputes, or enforce our agreements.”

What that means: Your personal data persists on servers long after you believe it is gone, potentially accessible if legal processes arise.

The policy explicitly states that data is kept indefinitely for vague reasons like legal obligations or dispute resolution, and remains in backup storage due to latency.

Medium cost

Unilateral changes with little or no notice

You are agreeing to potential future updates to this policy that bind your continued use.

“We may revise this Privacy Policy from time to time... If a revision meaningfully reduces your rights, we will notify you.”

What that means: The rules governing your data can shift over time, and you may not be warned unless the impact is severe.

Dropbox can update the privacy terms without prior specific consent for every change, only providing notice when rights are reduced.

Medium cost

Tracking you across apps

You are agreeing to provide your identity and usage details to content owners via analytics features.

“Recipient and viewer analytics... we collect information including your identifying and device information... on how you interact with the viewed content.”

What that means: Your viewing habits and identity are exposed to others using the service's analytics features.

When you view shared content, Dropbox tracks detailed interaction metrics and identifies you to the content owner, facilitating cross-service tracking.

Lower cost

Cookie consent that favors Accept

You are agreeing to trackable cookie technology as a condition of full service usage.

“You can set your browser to not accept cookies, but this may limit your ability to use the Services.”

What that means: Users might accept cookies to avoid functional limitations rather than for privacy preference.

The policy suggests that rejecting cookies restricts functionality, which pressures users into accepting tracking technologies.

Lower cost

Liability shifted onto the user

You are agreeing to localized liability frameworks where Dropbox’s responsibilities are defined by region.

“If you reside in North America... Dropbox, Inc. acts as your service provider. For all other users, Dropbox International Unlimited Company acts as a controller.”

What that means: Legal recourse and accountability mechanisms vary depending on where you live.

The policy shifts liability by defining different roles (controller vs processor) based on location, affecting user recourse.

If these terms already apply to you

Keep this list. Fineprint cannot undo or cancel something you already agreed to at the company.

We cannot see Agree on their site. With Premium, tap “I accepted these terms” if you already agreed to what Dropbox asks.