This website knows one thing.

What we collect

Three things, and only if you hand them over.

The waitlist

If you join it, we store your email address and the date you joined. That is the entire record. There is no name field, no company field, nothing else.

The support form

If you write to us from the support page, we store what you typed: the category, your email address, your name and subject if you gave them, your message, and the iPhone, iOS version and build number if you filled those in. Any screenshots you attach are stored with it.

It is kept so that we can answer you and so the thread survives if you write again quoting your reference. Nobody else sees it, it is never used for anything else, and it is not added to the waitlist. Ask us to delete a message and we will, along with anything attached to it.

The account page

stills.cam/account signs you in to the Stills app account you already have, so you can change its email address or delete it without the app in front of you. It is the same account and the same server the app talks to — the app privacy policy describes what that server holds — and this website stores nothing of its own about it. Your email address and the code you type go straight from your browser to the account server; they are not written to the waitlist, not added to any list, and not logged here.

Being signed in on this page lasts as long as the tab. Nothing is kept in your browser afterwards — close it and you are signed out. That is deliberate rather than lazy: the app remembers you because it is your phone, and this page might be open on somebody else's computer, which is part of why it exists.

Both public forms carry a hidden field that people never see and never fill in. If it comes back filled we treat the submission as automated and quietly drop it. It collects nothing about you.

To stop the support form being used to send us thousands of messages, we count recent submissions against a one-way hash of the sender's IP address. We do not store the address itself, the hash is not attached to your message, and it cannot be turned back into a list of who wrote in — all it can answer is whether that bucket has been busy in the last hour.

What we do with it

The beta is now open to everyone on a public TestFlight link, so the waitlist is no longer how anyone gets in. An address on it gets one email, and only one:

1. One on August 28, 2026, the day Stills reaches the App Store.

Then we stop. We do not sell, rent, trade or share the list with anyone, and we do not use it to advertise to you anywhere else.

Cookies and analytics

This site sets no cookies and runs no analytics — no Google Analytics, no Meta pixel, no heatmaps, no session recording, no A/B tooling.

One thing is stored in your browser: after you join the waitlist, we save a single flag in local storage so the page can show you a confirmation instead of asking again on your next visit. It contains no personal information, it is never sent anywhere, and clearing your browser data removes it.

Nothing is loaded from anyone else

Every font, image, stylesheet and script on this site is served from this domain. There are no third-party embeds, no external font services, no tag managers, no chat widgets. Loading any page here does not tell another company that you were here.

That includes the account page, and it took some doing: it used to pull a JavaScript library from a public CDN, which quietly made the sentence above untrue on the one page where it mattered most. It talks to the account server directly now, with no borrowed code in between. The only outbound request this site makes to anyone is the one you start by asking for a sign-in code — and it goes to the Stills account server, not to a third party watching you.

Hosting and server logs

The site is hosted on Cloudflare, and the waitlist is stored in a Cloudflare database. Like every web host, Cloudflare processes standard request data — including your IP address — to serve pages and block abuse. That processing is governed by Cloudflare's own privacy terms, and we do not build our own logs, profiles or analytics on top of it.

The account server is Supabase, which is where the Stills app keeps accounts, and sign-in codes are delivered by Resend. Both are processors: they handle what is needed to sign you in and nothing else. Neither is involved in this site's waitlist or support form, and neither is loaded on any other page.

Your choices

Email hi@stills.cam and ask us to show you what we hold for your address, correct it, or delete it. That covers both the waitlist and anything you sent through the support form. We will not ask you why.

Your Stills account is separate from all of that, and you do not need to ask anyone: change its address or delete it yourself at stills.cam/account, or in the app under Settings.

Children

This site is not directed to children under 13, and we do not knowingly collect their information. If a child under 13 has joined the waitlist, tell us and we will remove the address.

Changes

If this ever changes, the policy and the date above change with it.

Contact

Neurovia, hi@stills.cam.