Who is responsible
Gjin Prelvukaj, an individual based in Kosovo, is responsible for this website and for the personal data described here. Contact: [email protected].
The app
- Stillroom makes no network connections. It has no server, no account, no sync, no analytics and no crash reporting. Every build is checked and refused if networking code appears in it.
- Your vault, its keys and everything in it stay on your Mac. We can’t see or reach any of it.
- The activity log, if you turn it on (it’s off by default), stays on your Mac for 7 days and never records typing, file names, sizes, passwords or contents. It only leaves your Mac if you choose to send it to us.
- The intruder log’s photos, if you allow them, are sealed inside your vault, on your Mac.
This website
- No cookies, no analytics, no trackers, no advertising, and nothing loaded from anyone else. The one exception is the checkout page: it loads Paddle’s checkout script, which may set cookies of its own when you buy.
- It’s hosted on Cloudflare Pages. To deliver pages and protect the site from attacks, Cloudflare processes each request, including your IP address, under Cloudflare’s own privacy policy. We don’t add analytics to that, and we don’t use it to build a picture of visitors.
- The “Seal it yourself” demo runs in your browser. What you type there is never sent anywhere; the site’s security policy lets pages talk only to stillroomvault.com, and the demo doesn’t make any request at all.
When you buy
Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns.
At checkout, Paddle collects what it needs to take payment, charge the right tax and prevent fraud: typically your name, email address, country and postcode, payment details, IP address, and a VAT number if you give one. Paddle is responsible for that data under its privacy policy. We never see your card details.
Paddle passes us your name, email address, country and what you bought. We use them to:
- make and email your licence key, which carries your email address, your edition and the major version;
- answer you about your order, or send your key again if you lose it;
- tell you when a new version is out, since the app never checks for updates itself. You can ask us to stop.
We keep order records for as long as tax law requires, and nothing else for longer than we need it.
When you email us
We get your address and your message, and keep them as long as we need to help you. Please never send us your password, recovery key or kit pieces. We’ll never ask for them.
Who else handles it
- Paddle: checkout, payment, tax, invoices and refunds, as described above.
- Cloudflare: hosts this website, and forwards email sent to our addresses to our mailbox.
- Our email provider, which holds the messages we send and receive, and the service that sends licence keys once licensing is live. We’ll name both here before then.
Some of these process data outside your country, including in the United States. We rely on their standard contractual safeguards for that. We never sell personal data or share it for advertising.
Why we may use it
- Sending your licence key and helping with your order: to carry out our agreement with you.
- Telling buyers about new versions: our legitimate interest in keeping you able to update, since the app can’t check. Every such email says how to stop them.
- Keeping order records: what tax law requires.
Your rights
You can ask us what we hold about you, and ask us to correct, export or delete it, or object to how we use it, at [email protected]. If you’re in the EU or UK, you can also complain to your data protection authority.
Changes
If this policy changes, the new version will be posted here with its date.