stillna

Privacy Policy

Last updated: 26 August 2026

Stillna collects an email address only when a person provides one, and nothing else. The website uses no cookies, no analytics and no tracking of any kind. Personal data is never sold, rented or shared for anyone else's purposes. Any person may request deletion of their data at any time by writing to hej@stillna.app.

1. Data controller

Stillna AB, a company in formation and registered in Sweden, is the data controller for the personal data described in this policy. The organisation number will be stated here once the registration is complete.

All enquiries relating to this policy, and all requests to exercise the rights set out in section 7, should be sent to hej@stillna.app.

2. Personal data we collect, and for what purpose

Waiting list. When a person submits an email address through the form on stillna.app, we store that address. A confirmation message is sent to it, and the address is added to the list only after the recipient has confirmed it. The address is used solely to send information about Stillna's development and availability.

Contact form. When a person writes to us through the contact form, we receive their email address, their message, and their name if they choose to provide one. This information is used to respond to the enquiry. If the person also ticks the box for updates, the address is added to the waiting list through the same confirmation step described above.

Website visits. Stillna operates no web analytics, no measurement pixels and no cookies. We therefore hold no record of who visits stillna.app, how often, or from where. Our hosting provider processes technical data, including IP addresses, to the extent necessary to deliver the website and protect it against attack.

Language preference. A visitor's choice of Swedish, English or French is stored locally in their own browser so that the site can display the same language on a return visit. This information remains on the visitor's device and is never transmitted to us.

The application. Stillna is built without a server. The application does not collect, transmit or store information about a user or their child outside the device. This is a deliberate design decision and applies to all versions of the application.

3. Legal bases for processing

Processing for the waiting list is carried out on the basis of consent, Article 6(1)(a) of the General Data Protection Regulation (GDPR). Consent is given by confirming the email address and may be withdrawn at any time.

Processing carried out in order to answer an enquiry sent to us is based on our legitimate interest, Article 6(1)(f) GDPR, in responding to correspondence initiated by the individual.

4. Recipients and processors

We engage a small number of service providers. Those who process personal data on our behalf do so under written data processing agreements and may not use it for their own purposes. One exception is noted in the table below.

ProviderFunctionLocation of processing
ResendDelivery of confirmation and update emails; storage of the waiting listUnited States, with email routed from the EU (Ireland)
CloudflareWebsite hosting and protectionEuropean Union, with global infrastructure
GandiOperation of the hej@stillna.app mailboxEuropean Union (France)
GoogleMail account in which correspondence to hej@stillna.app is read. Governed by Google's own consumer terms rather than by a data processing agreementEuropean Union and United States

Personal data is not sold, rented or exchanged. It is disclosed to third parties only where we are required to do so by law.

5. International transfers

The waiting list is stored by Resend in the United States, and correspondence sent to us may be processed in the United States by Google. These transfers take place under the European Commission's adequacy decision for the EU-US Data Privacy Framework, under which both providers are certified, and in Resend's case additionally under Standard Contractual Clauses. Outgoing email from stillna.app is routed through servers within the European Union (Ireland). All other processing described in this policy takes place within the European Union.

6. Retention

DataRetention period
Confirmed addresses on the waiting listUntil the person unsubscribes or requests deletion
Unconfirmed addressesDeleted after six months
Messages received through the contact form24 months from our final reply

7. Rights of the data subject

Every individual whose personal data we process has the right to request access to that data, its rectification, its erasure, restriction of its processing, and its transfer to another controller in a machine-readable format, and to object to the processing. Where processing is based on consent, that consent may be withdrawn at any time, most simply through the unsubscribe link included in every message we send.

Requests should be sent to hej@stillna.app. We respond within one month, as provided in Article 12 GDPR. No fee is charged.

8. Complaints

An individual who considers that we process their personal data unlawfully has the right to lodge a complaint with the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), imy.se, +46 8 657 61 00.

9. Security

Access to personal data is limited to those who need it in order to operate Stillna. Credentials are stored separately from the systems that use them, all transmission takes place over encrypted connections, and the domain is protected by SPF, DKIM and DMARC.

10. Automated decision-making

We carry out no automated decision-making and no profiling within the meaning of Article 22 GDPR.

11. Children

The website is directed at adults. We do not knowingly collect personal data from children. A parent or guardian who believes that a child has provided us with personal data may contact us at hej@stillna.app, and the data will be deleted.

12. Changes to this policy

Any change to this policy is reflected in the date at the top of this page. Where a change is material, we inform those on the waiting list before it takes effect.