IronDrop stores uploaded files on the local server in the uploads/ directory and stores associated metadata in a local SQLite database.

Stored metadata includes the File ID, generated password, original filename, stored filename, file path, MIME type, size, and upload timestamp. Passwords are currently stored in plaintext for MVP simplicity.

This MVP does not include analytics, advertising trackers, account profiles, or third-party storage providers. If you deploy it beyond local use, you should add HTTPS, password hashing, access logging, and a formal data retention policy.