Privacy Policy

Still collects the minimum information necessary to provide the service: your username, a hashed password (we never see your actual password), and the documents you choose to create in your workspace. We do not collect analytics, usage patterns, typing speed, session duration, or any behavioral data. We don't use cookies for tracking purposes—only essential authentication tokens.

Your documents and account information are stored in an encrypted database. Passwords are hashed using bcrypt with a salt factor of 12, making them virtually impossible to reverse-engineer. We never store plain-text passwords. All communication between your browser and our servers is encrypted via HTTPS.

Any document, note, or piece of writing you create on Still is yours. We do not claim ownership, we do not use your content to train AI models, and we do not share your content with third parties. You can export your work at any time in standard formats (.docx, .md) and delete your account, which removes all associated data permanently.

We do not sell, rent, or share your personal information or content with any third party for marketing, advertising, or analytics purposes. The only third-party services involved are our hosting infrastructure, which is bound by strict data processing agreements.

You may delete your account at any time by contacting us. Upon deletion, all your documents, notes, and personal information are permanently removed from our database within 30 days. Some anonymized data may be retained for legal compliance purposes.

If you have questions or concerns about this privacy policy, please reach out at privacy@stillwriting.app.