The user funds and bitcoins are stored in secure cold wallet infrastructure. Bitbns which is the entity behind bitdroplet has an impeccable reputation on security.