Privacy policy
Last updated: 6 October 2026
Stillzoo is a calm-down game for kids that runs in the browser. We built it to collect as little as possible. This policy covers stillzoo.com: the game, its checkout page and these pages.
Stillzoo ("we", "us"), based in India, runs it and is the controller of the personal data described here. Privacy questions: hello@stillzoo.com.
The camera
- The camera picture is checked on your device, in the browser. It's never recorded, stored or sent: we never receive video, photos, body positions or anything else from the camera.
- The camera turns on only after you press Start, and turns off when the sequence ends or you press Stop. You can play with the space bar instead, with no camera at all.
- To check the poses, the page downloads a pose library from cdn.jsdelivr.net and a pose model from storage.googleapis.com (Google's file storage). These are ordinary file downloads with nothing about you or your child in them, though, like any download, those servers see your IP address. With the space bar, nothing is downloaded from them.
- The pose library tries to send usage statistics to Google. The page blocks that, so nothing is sent.
The game
- There are no accounts, ads, analytics or trackers, and the game sets no cookies.
- The star chart is kept in the browser on your device and is never sent anywhere. If you unlock, the browser also keeps the signed unlock and a random device ID.
- Clearing the browser's data for stillzoo.com deletes all of it.
Unlocking the game
When you unlock a device, the game sends our licence server, on stillzoo.com, your licence key or, straight after you pay, Paddle's ID for the purchase, together with that random device ID. This happens once per device. The server answers with a signed unlock that the browser keeps, and from then on the game checks it on the device without sending anything.
For each purchase, the licence server stores:
- a scrambled (hashed) copy of the licence key, never the key itself;
- Paddle's ID for the purchase;
- the random device IDs that have unlocked with it, so it can count them;
- when the record was made and when the unlock email went out;
- whether the purchase was refunded or charged back, and when.
It stores no names and no email addresses. To send your unlock email after you pay, the server asks Paddle for your email address, uses it for that one email and doesn't keep it. To unlock the device you paid on, it asks Paddle whether the purchase is paid.
"Email my key again"
If you ask for your key again, the email address you type goes to our licence server, which uses it only to look up purchases with Paddle. If Paddle has a Stillzoo purchase for that address, the server emails the key to the address Paddle has on file. The address isn't stored, and the page shows the same reply whether or not it bought anything.
To stop abuse, the server counts these requests per email address and per IP address. It keeps each count under a scrambled (hashed) label, never the address or IP itself, and deletes it after an hour.
Buying through Paddle
Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns.
Paddle collects your name, email address, payment and billing details to process the order, under Paddle's privacy policy and Paddle's buyer terms. The checkout page loads Paddle's checkout from paddle.com, and it's the only page that does; anything Paddle's checkout keeps in your browser is covered by Paddle's policy. Paddle shares your email address and order details with us so we can send your unlock and help if something goes wrong. We never see your card details.
Emails
The unlock email, and any you ask for again, comes from unlock@mail.stillzoo.com and is sent through Cloudflare's email service. It has no images, tracking pixels or tracked links. When you write to hello@stillzoo.com, Zoho handles that mailbox for us, on servers in the United States.
Hosting
The site, the game and our licence server run on Cloudflare, which processes basic request data, such as IP addresses, to deliver and protect them. Our licence server's error logs record what went wrong, never an email address or a key.
Why we use it
To sell you the Family Unlock and make it work (performing our contract with you), to answer your emails and to stop fraud and abuse, such as with the counts above (our legitimate interest in running a safe service), and to keep the records the law requires (legal obligation).
Who we share it with
Paddle, to sell and support your purchase; Cloudflare, which hosts the site, the game and the licence server and sends the unlock emails; Zoho, for our mailbox; professional advisers where needed; and authorities where the law requires it. The pose downloads reach jsDelivr and Google as described above, with nothing about you in them. Some of these process data outside your country, including in the United States.
How long we keep it
- Licence records (the hashed key, Paddle's purchase ID, the device IDs, the dates and the refund status) are kept for as long as the Family Unlock works, so your devices can unlock again.
- The counts for "email my key again" are deleted after an hour.
- Emails you send us are kept while we need them to help you.
- Paddle keeps order records as tax law requires.
- The star chart and the unlock on your device stay until you clear the browser's data for stillzoo.com.
When we no longer need data, we delete or anonymise it.
Keeping it safe
Everything travels over HTTPS, licence keys are stored only as hashes, unlocks are signed so they can't be forged, and access to our hosting, payment and email accounts is limited to us.
Your rights
You can ask us what we hold about you, to correct it, or to delete it. Our licence server doesn't hold your name or email address, so if you're asking about a purchase, include your Paddle order number. Email hello@stillzoo.com. If you're in the EU or UK, you can also complain to your data protection authority.
Children
Kids play Stillzoo, and grown-ups set it up and buy it. The game asks a child for nothing: no name, age, photo or account. We don't knowingly collect any personal information from children. If you think a child has sent us some, for example by email, write to us and we'll delete it.
Changes
If what we collect changes, we'll update this page and the date at the top first.