Clear words. No fine-print surprises.

Privacy policy

Last updated: November 9, 2026 · Launch template — operator review required.

1. Who operates this service

This policy applies to Still, the private online journal on this domain. Contact the operator at support@your-domain.com. Before public launch, the operator must add its legal identity, address, jurisdiction, and applicable regional privacy rights to this policy.

2. What we store

We store your name, email, password hash, optional PIN hash, subscription records, journal entries, and uploaded files. Entry titles, body text, attachment filenames and attachment bytes are encrypted at rest with a server-managed key. Notebook names, dates, word counts, mood scores and account metadata are not encrypted in the database.

3. How your information is used

Information is used to provide your journal, enforce subscription access, show your personal insights, secure accounts, and send requested password-reset emails. No advertising trackers or third-party analytics are included. We do not sell journal content.

4. Encryption and its limits

This service uses server-side authenticated encryption, not end-to-end encryption. Authorized server operators with the application key can technically decrypt stored content. HTTPS protects data in transit. A PIN is an additional application lock, not a substitute for device security or your account password.

5. Cookies and offline drafts

A necessary, HttpOnly session cookie keeps you signed in. The service worker caches only public pages and static assets, never authenticated responses or attachments. Optional offline drafts are encrypted in your browser using a passphrase you choose. A forgotten offline passphrase cannot be recovered. Clearing browser data or signing out removes local drafts. Your device or browser provider may retain its own backups.

6. Providers and payments

The hosting provider processes server data. Password-reset messages may be handled by the operator's email provider. Checkout is currently a demonstration: no card numbers, PayPal credentials or M-Pesa PINs are requested, and no payments are processed. Operators must update this policy before connecting live providers.

7. Retention, export and deletion

Journal entries remain available in read-only mode after subscription expiry or cancellation. You may delete individual entries while write access is active. All users can request account or data deletion from support, including read-only users. PDF export remains available to signed-in, unlocked accounts. The operator must define backup retention, deletion response times and legal record-retention duties before launch.

8. Your choices and rights

Contact support to request access, correction or deletion, raise a privacy concern, or exercise rights under applicable law. This service is not designed for children under 18. Specific regulator contacts, cross-border transfer safeguards and legal bases must be completed by the operator where required.