STILLSET
Privacy policy
Operator
StillSet is operated by Pony Nguyen in Vietnam. For privacy, account, purchase, refund or product help, email support@stillset.app.
Your workspace stays in the browser
Image processing and ZIP creation occur in browser memory. Selected photos, logos, previews and completed outputs are not uploaded to a remote image-processing service, stored as account files, or used for analytics. Refresh discards the working batch; files you download remain on your own device until you delete them.
Optional product analytics
If you allow analytics, Google Analytics 4 receives approved page views and a small set of product events. Analytics remains off until you choose Allow analytics. You can change your choice using Analytics choices at any time. Photos, logos, filenames, preset names, email addresses, authentication links, and URL queries are never sent. Page paths are limited to approved routes; campaign values are allowlisted and shortened, and referrers are reduced to their origin. Signed-in site owners are excluded automatically. You can also exclude this browser or mark your testing as QA traffic in Analytics choices. Google may process analytics data under its own terms.
Accounts and preset metadata
Account authentication is processed by Supabase Auth, with auth email delivered through the configured Resend SMTP sender. Pro saved presets store validated preset names and settings on the server, scoped to the signed-in account. Presets do not contain raw image files, logos, previews or completed outputs.
Service providers
Cloudflare hosts and protects the website. Lemon Squeezy is configured for paid checkout as merchant of record, including payment, tax, receipt, refund and chargeback handling needed for that role.
Retention
Saved preset metadata remains until you delete the preset or delete your account. Stale rate-limit counters and operational locks are eligible for cleanup after a 24-hour buffer. Encrypted operational backups are retained for 30 days. Ordinary closed support records are retained for 12 months, except where billing, dispute, webhook, deletion, security, accounting or legal records must be kept longer.