Privacy Policy

Notebooks, pages, strokes, templates, imported files, settings, and many exports are stored locally in the browser or mobile app. We cannot see local-only content unless you intentionally place it in a shared session, contact us with it, or send it through an integration you enable.

When you join a session, the service processes the display name and randomly assigned presence colour you choose, document updates, cursors, participant status, chat messages, and session controls. This data is relayed through the Stilopad realtime API so other participants can receive the same page. Session content is not used for advertising.

When you turn on audio or video, media is sent using WebRTC peer connections where possible. Network addresses and connection metadata can be visible to the peers or handled by relay infrastructure as required to establish a call. Camera and microphone access can be revoked in your device or browser settings.

Cloudflare hosts the website and realtime service and may process security and technical logs. If you search GIFs, your query is sent to the Stilopad API and the configured Klipy provider; the Klipy key stays server-side. Firebase Analytics may process app events and device or browser information to help us understand product reliability and aggregate feature use. These providers process information under their own terms and our configured service arrangements.

If you choose a Google feature, Stilopad requests access only when you press the relevant connect, open, save, or sync control. The app may receive your basic Google account identity and access to the specific Drive files Stilopad creates or you select, plus app-specific configuration data. This access is used only to show, open, save, and synchronize those Stilopad files for you. It is not used for advertising, sold, or used to train a general-purpose AI model.

Stilopad’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect Google access and remove related data as described on Data & deletion.

Local data remains until you delete it or clear the app or browser storage. Files you save to a connected provider remain under that provider account until you remove them there or through an available Stilopad control. Shared-session data is intended for live collaboration and may be discarded when the session is no longer active. Analytics and technical records are retained only as long as reasonably needed for measurement, reliability, security, fraud prevention, or legal obligations. See Data & deletion or contact contact@stilopad.com.

You can choose not to join a session, deny camera or microphone permission, avoid optional GIF search, decline or revoke Google access, disable analytics where a control is available, and delete local notebooks from the app. Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information. Contact us and include enough detail to identify the request.

Stilopad is not directed to children under the minimum age required in their country. Do not add a child’s personal information to a shared session without appropriate consent. No internet service is perfectly secure; use private links, strong device security, and current app versions.

Privacy questions and requests go to contact@stilopad.com. We will update this page when our data practices change and will show the new effective date.