The Stillcode app collects no data about you. It has no servers, no accounts and no analytics, and it makes no network calls at all. This website is a separate thing, and it is counted.
Last updated 7 September 2026. Applies to Stillcode for iPhone, iPad and Mac.
| What | Where it is kept |
|---|---|
| The secret keys your codes are generated from | The system Keychain on your device, encrypted by the system. Guarded by Face ID or Touch ID when you turn the app lock on. With Stillcode Pro, these are Keychain items marked for iCloud Keychain, which Apple syncs under its own end-to-end encryption. |
| Which accounts you use most, your ordering and pins, and your settings | A local store on the device. It holds opaque identifiers and preferences only - never a secret, an issuer name or an account label. A build check enforces that. |
| An encrypted export file, if you make one | Wherever you send it. The app hands the file to the system share sheet; it never writes it anywhere itself and never uploads it. The file is encrypted with a passphrase you choose. We cannot recover that passphrase. If you lose it, the file cannot be opened. |
The app asks for the camera only when you choose to scan a QR code, and for your photo library only when you choose to add a code from a photo. Images are read on the device to find the QR code and are not stored by the app or sent anywhere. You can decline both and still add accounts by typing the key.
Stillcode is rated 4+ and collects no data from anyone, including children.
Regulations such as the GDPR and the CCPA give you rights to access, correct, export and delete personal data a company holds about you. We hold none, so there is nothing for us to produce or erase. Your data is on your device: deleting the app, or removing an account inside it, removes it. If sync is on, removing an account removes it from your iCloud Keychain too.
Everything above is about the app. This website is not the app, and it is not silent.
It is served by Cloudflare Pages, and Cloudflare adds its own page-view script from
cloudflareinsights.com to every page here — including the one you are reading. It counts
visits and where they came from. It is not part of the app, it cannot see anything the app holds, and
no code on this site asks you for anything or has anywhere to send it.
Said plainly so the sentence at the top cannot be read too widely: the app makes no network calls; this website makes one.
If this policy changes, the date at the top changes with it and the previous version is replaced here. Material changes will also be described in the app's release notes.
Stillcode is made by Aliaksei Shuliakouski, an individual developer. There is no company, no data-processing team and no third party with access to anything, because there is nothing to have access to.