Droppy is a self-hosted PHP script for running a file transfer and sharing service on a server the site owner controls. Built by Proxibolt and sold on CodeCanyon under the Loaders & Uploaders category, it handles uploads, expiring download links, recipient emails and an admin back end in one package. It suits freelancers, agencies and internal IT teams that need branded file delivery without handing client data to a third-party service, and it is a poor fit for anyone who wants a fully managed platform with no server maintenance. The listing has drawn 2,638 sales and a 4.33 out of 5 rating across 227 reviews, which is a solid signal of longevity for a script in this price range.
What Droppy actually does well
The core workflow is straightforward. A visitor drags files onto the upload area, adds one or more recipient email addresses, and Droppy either emails a link or produces a shareable URL. Folder uploads are supported and the internal folder structure is preserved, which matters for anyone sending a project directory rather than loose files. Large files are split into chunks during transfer, so an interrupted connection can resume rather than restart from zero — a practical detail that separates workable self-hosted uploaders from frustrating ones.
Security and retention controls are where the script goes beyond a basic form. Uploads can be password protected, and an encryption option stores files under a key that only Droppy can use to decrypt them. Files can be set to self-destruct after a fixed period or after a set number of downloads. Email verification can be required before an upload completes, and the admin can force login for either the upload page, the download page, or both. There is also an hourly upload limit per IP address, added in a recent release, which is the kind of control that matters once a public instance starts attracting abuse.
On the presentation side, Droppy generates image thumbnails, includes a video player for previewing uploaded clips, and supports fullscreen image or video backgrounds. Two AdSense slots are built in for anyone monetising a public instance. The interface is translatable, with automatic browser language detection, and the upload form can be embedded in another site through an iframe — useful when the sharing service should sit behind an existing brand page rather than replace it.
Administration is handled through a panel that covers uploads, downloads, users, email templates, backgrounds and site settings. Per-upload limits include maximum file count, maximum size, expiration time and blocked file types. A custom admin URL route is available to reduce automated probing, a custom analytics snippet can be injected, and themes can be switched or recoloured. The script also ships with a one-click auto-update mechanism, and the changelog shows more than 100 free updates since launch, with the most recent entry dated 2026.
Four optional add-ons extend the base product: S3-compatible storage (covering AWS S3, Google Cloud Storage, Wasabi, Backblaze B2 and DigitalOcean Spaces), FTP and SFTP, premium subscriptions, and Active Directory with Microsoft Entra ID. These are separate purchases and the vendor does not state their prices on the main listing, so budgeting for them requires a check of the add-on pages.
Where Droppy fits, and where it does not
The clearest fit is a business or freelancer that regularly sends large files to clients and wants the transfer to happen under its own domain. A design studio sending print-ready artwork, a videographer delivering raw footage, or an accountancy practice exchanging documents with clients all get something a consumer file-sharing link cannot offer: a branded URL, configurable expiry, and a record of who downloaded what.
Internal use is equally plausible. With login enforced and uploads restricted to specific accounts, Droppy works as a lightweight drop box for a company that wants employees to move files without opening a general-purpose cloud drive. The Active Directory add-on points directly at that scenario, since it allows existing corporate credentials to be reused instead of creating separate accounts.
It also fits the hobbyist or small operator who wants to run a public sharing site with advertising. The AdSense slots, custom pages and theme controls exist specifically for that audience.
Where Droppy is the wrong choice is equally clear. Anyone without a server, or without the willingness to manage PHP, a database and file storage, should not buy it. This is not a hosted product — installation, updates, backups and security patching are the buyer’s responsibility. A person who wants to send one file a month is better served by a free hosted service. And an organisation with strict compliance requirements around encryption key management should read the documentation carefully before assuming the built-in encryption satisfies its auditors, because the vendor states that decryption happens through Droppy itself.
Strengths and limitations
Strengths
- Genuinely broad feature set for the price: expiry rules, password protection, encryption, email verification, per-IP limits and recipient management are all included in the base script.
- Chunked uploads with automatic resume handle large files and unstable connections without forcing a restart.
- Folder uploads preserve directory structure, which most simple upload scripts do not.
- Active development: the changelog lists over 100 free updates, with security and performance fixes appearing as recently as 2026.
- Compatibility is stated for both PHP 7.x and PHP 8.x, and for IE11 through to current Chrome, Edge, Firefox, Safari and Opera.
- Source files are included in JavaScript, HTML, CSS, PHP and SQL, so the code can be modified rather than treated as a black box.
- Storage backends are extensible through add-ons, so a small instance can start on local disk and move to object storage later.
Limitations
- Self-hosting shifts all operational risk to the buyer. There is no managed hosting, no vendor-run backup, and no support contract implied by the purchase.
- The most valuable enterprise features — S3 storage, FTP/SFTP, subscriptions and Active Directory — are paid add-ons, so the effective cost for those setups is higher than the headline figure.
- Encryption is tied to Droppy’s own key handling. Files cannot simply be decrypted outside the application, which limits portability and may not satisfy every compliance regime.
- The vendor does not publish performance benchmarks or tested concurrency figures, so capacity planning for a busy public instance has to be done empirically.
- Documentation quality and the depth of post-purchase support are not described in the listing; buyers should check the demo and any linked docs before committing.
- AdSense integration and public-facing features mean the script is designed for open instances as well as private ones, which increases the configuration surface an administrator has to lock down.
How it compares with the wider category
Self-hosted upload scripts generally fall into three groups. The first is minimal single-file uploaders: a form, a folder on disk, a link. They are cheap and quick to deploy but offer no retention rules, no recipient management and no admin layer. Droppy sits well above that group, and the gap is mostly in the controls an administrator gets — expiry, per-IP limits, blocked file types, login gating and download reporting.
The second group is full document management systems with versioning, permissions trees and collaboration tools. Those solve a different problem. Droppy is built around transfer, not ongoing document work, so it is lighter to run and simpler to explain to end users, but it will not replace a system that needs shared editing or folder-level access control.
The third group is hosted transfer services. They win on convenience and require no server, but they place file storage, retention and access under someone else’s policy. Droppy’s entire argument is that the operator keeps that control. The trade is that the operator also inherits the maintenance.
Within the CodeCanyon Loaders & Uploaders category specifically, the combination of folder uploads, chunked resumption, encryption, expiry rules and an add-on path to S3 and directory services is a broad package. Buyers comparing on feature lists alone will find few scripts matching it at this price point; buyers comparing on total cost of ownership need to factor in hosting and any add-ons they require.
Frequently Asked Questions
Do I need my own server to use Droppy?
Yes. Droppy is a self-hosted PHP script, so it requires a web server with PHP 7.x or 8.x and a database. The buyer installs it, configures storage and manages updates. There is no hosted version sold through the marketplace listing, and the vendor does not provide managed hosting as part of the purchase.
Can Droppy upload folders and keep the folder structure intact?
Yes. Folder uploading is supported and the original directory structure is preserved on the receiving end. That makes it suitable for sending complete project folders rather than zipped archives. Large transfers are split into chunks and resume automatically if the connection drops, so a long folder upload does not have to start over.
Are files encrypted, and can they be decrypted outside Droppy?
Files can be encrypted when the feature is enabled, using a key unique to the installation. The vendor states that decryption happens through Droppy itself, which means stored files are not directly readable by other tools. That improves security but reduces portability, so anyone with strict data-handling requirements should confirm the behaviour fits their policy first.
Does Droppy support cloud storage instead of local disk?
Yes, through a separate S3 add-on that connects to AWS S3, Google Cloud Storage, Wasabi, Backblaze B2, DigitalOcean Spaces and other S3-compatible endpoints. FTP and SFTP support is available through a second add-on. Both are optional paid extras, and the main listing does not state their prices.
Verdict
Droppy is a well-established, actively maintained option for anyone who wants to run file transfer on infrastructure they control. The feature depth is real rather than marketing padding — expiry rules, per-IP limits, chunked resumption, folder uploads and encryption are the kinds of details that only matter once a service is actually in use, and they are all present. The 2,638 sales and 4.33 rating across 227 reviews suggest the script has held up over time rather than being abandoned after launch.
Buy it if there is a server available, a genuine need for branded or private file delivery, and someone able to handle installation and ongoing maintenance. Budget for add-ons if S3, FTP or directory-based login are required, since those are not in the base price.
Do not buy it if the goal is a zero-maintenance service, if there is no technical capacity to run PHP and a database, or if occasional one-off file sending is the only requirement. In those cases a hosted transfer service is cheaper and simpler, and Droppy’s control benefits never get used.