Privacy, in plain English
Last updated: July 5, 2026 · Early access
The heart of it
StillWith exists to carry your most personal words. So the product is built so that we cannot read, hear, or watch what you seal. Messages — letters, voice, video — are encrypted on your own device before they reach us. What we store is ciphertext: scrambled bytes that are useless without keys we don’t have.
What we collect
- Waitlist: your email address (processed by Formspree) and, if present, which page and link brought you (e.g. “tiktok”). Used only to invite you and understand what’s resonating.
- Account: your email, your first name if you give it, and your password (stored only as a hash by our authentication provider, Supabase).
- Recipients & timing: the names, emails, and birthdates you add so delivery can happen — visible only to you and used only for delivery.
- Sealed messages: encrypted content we cannot open, plus unencrypted labels you write (like a message’s title) — so keep titles non-sensitive if that matters to you.
- Analytics: anonymous page-view counts (Vercel Analytics). No ad trackers, no selling data, no third-party ad pixels.
The honest fine print on keys
- “Deliver now” links: the decryption key travels only inside the link we hand you — it never touches our servers. We could not open these messages if ordered to.
- Scheduled messages (dates, birthdays, after you’re gone): your device places a delivery key in escrow with us, so the message can reach them even if you can’t mint a link. That means our systems technically hold what’s needed to deliver — that’s what makes automatic delivery possible, and we tell you so plainly instead of pretending otherwise. Before wide launch we plan to harden this further.
- Your passphrase never leaves your device. If you forget it, sealed messages cannot be opened — by anyone.
What we will never do
- Sell or rent your data. To anyone. Ever.
- Read, hear, or watch your sealed content — we built the product so we can’t.
- Deliver anything to anyone you didn’t choose, at a time you didn’t choose (guarded by your trusted contact and a 14-day waiting period for after-you’re-gone delivery).
Deleting your data
You can delete any message anytime from your vault. To delete your whole account and everything in it, email hello@stillwith.org from your account email — we’ll confirm and erase it.
Who we share with (service providers only)
Supabase (database & authentication), Vercel (hosting & anonymous analytics), Resend (delivery emails), Formspree (waitlist). Each receives only what its job requires.
Questions
Email hello@stillwith.org — a human (the founder) reads it.