Your private sketchbook
Stilldraw is a free personal drawing journal operated by Yosel Del Valle. It helps you keep drawings, reflect on your practice and follow optional drawing challenges. Your journal is private, with no public profile or social feed. This policy covers the Stilldraw app and stilldraw.com. Effective October 10, 2026. This update clarifies our lasting privacy commitments, possible future funding and optional daily prompt notifications. It does not introduce advertising or new tracking.
No data sales or AI training
We never sell or rent your drawings, photos, notes, account information or other personal data, use them to train AI models, or sell or license them to AI companies. We do not supply them to advertising networks to deliver, target or measure ads, or to marketing platforms to build audiences. We do not track you across other companies’ apps and websites. The maker uses AI tools to develop Stilldraw; private user content and personal data are not input to those tools. The app and web journal currently contain no ads or analytics SDKs. Advertising may help fund Stilldraw in the future, but these data commitments will remain. No advertising format or provider has been selected; any introduction would be explained in advance. Public website visit counts are described below.
Information you provide
We store your email address and account identifier to sign you in. Your saved journal includes the images you upload, any information contained in those files, notes, entry dates, challenge memberships and completion progress. If you use the contact form, we receive your email address, optional name and message. If you contact support by email, we also receive whatever details or attachments you choose to send. Please avoid including private drawings or login codes in support messages unless they are needed; we will never ask for your login code.
Signing in with Apple or Google
If you choose to sign in with Apple or Google, the provider verifies your identity and shares an account identifier, email address and any profile information made available by that sign-in flow, such as a name or profile picture. We use that information for your account, not marketing. We do not receive your Apple or Google password. Your sign-in provider also handles information under its own privacy policy.
Why we use this information
We use your information to provide and sync your journal, authenticate your account, deliver sign-in emails, let you join invited challenges, show your own progress, respond to support requests and protect the service from abuse. We do not analyze your drawings or notes for advertising, profiling or AI training. Your data is not used to build marketing audiences.
On your device
Sign-in credentials are stored in the device keychain on iPhone, or browser storage on the web. Drafts and selected images may remain on your device until saved. The camera and photo or file picker are used only when you choose to add a drawing. We do not upload your entire photo library. Clipboard access is used when you choose Paste code. You can manage camera and photo permissions in your device settings.
Services that keep Stilldraw running
Supabase provides account authentication, the database and private image storage. Proton handles account email delivery and our support mailbox. Vercel hosts stilldraw.com. These providers process the information necessary to deliver their services. Requests can generate operational and security logs, such as IP addresses, browser or device information, request times and errors. We use these records to operate and protect Stilldraw, not for marketing. Providers may process data outside your country.
Public website visit counts
Public information pages on stilldraw.com use Vercel Web Analytics to measure page views, daily visitor estimates, referral domains, approximate location, and browser and device types. This helps us understand whether people find and read the website, including during promotional campaigns. It does not measure activity inside the journal, sign-in or invitation screens, drawings, notes, account details or contact-form contents. We remove all URL query strings and fragments, including advertising click IDs, before sending a page-view URL. Pages reached with a referral URL containing a path or parameters are excluded to avoid forwarding that information. Vercel processes network and browser information to deliver the service and create a visitor hash that expires after 24 hours; the traffic reports do not show individual identities or IP addresses. We do not enable analytics cookies, identify users, connect visits to accounts, create advertising audiences or send analytics to Meta or Google. Reports on our current plan cover one month. We honour browser Do Not Track and Global Privacy Control signals. You can also turn off website analytics at stilldraw.com/privacy; that choice stores only an off preference in this browser. Ordinary hosting and security logs still apply.
Optional notifications and drawing reminders
You can enable launch alerts for challenges you have joined, alerts when new daily prompts are ready, and a daily drawing reminder at 5 p.m. in your local time. Accepting the daily-notifications invitation enables both prompt alerts and drawing reminders; you can change those two choices separately in Settings. We store a push delivery token, a random installation identifier and your language linked to your account. For daily prompt alerts and drawing reminders, we also store your device timezone and notification preferences. Your timezone updates when you open the app; no GPS access is requested. Limited delivery records prevent duplicate alerts. Apple Push Notification service or Google Firebase Cloud Messaging processes the delivery token and notification payload. Alerts contain a generic message and account or challenge routing identifiers, never drawings or journal notes. We do not use notification data for marketing, advertising, AI training or tracking. You can turn daily prompt alerts and drawing reminders off separately in Settings. Turning all notifications off or signing out removes the registration when a connection is available; deletion is retried if offline. Account deletion removes registrations, reminder preferences and delivery records. You can also control permission in your device settings.
Daily challenge prompts
When you join a challenge with daily reveals, we store the timezone reported by your device and the number of prompts already revealed, linked to your account. This lets us release prompts at the challenge’s scheduled time in your timezone and keep earlier prompts available when you travel. We do not request GPS access or use this information for advertising or tracking. These records are removed when you delete your account.
Contact form spam protection
The contact form uses our own security checks and submission limits, without third-party CAPTCHA, cookies or analytics. Short-lived signed form tokens help reject automated submissions. We store keyed, one-way identifiers derived from the network address and reply email, plus a submission time, to limit repeat messages. These records are used only for abuse prevention; records older than two days are cleared when the form is used again. Form messages are delivered to our Proton support mailbox, not stored in the rate-limit database.
Access and sharing
Your saved work is associated with your account and stays private within Stilldraw. We will not turn your journal into a public gallery as the product or its funding changes. Authorized service administration may require access for support, maintenance, security or legal obligations; this is not an end-to-end encrypted journal. When you choose to export or share a drawing, the destination app or recipient receives the content you select and its own privacy practices apply. Links to external drawing resources open third-party websites. Joining a challenge does not publish your journal or give the challenge creator access to your drawings.
Keeping and deleting your data
Account and journal data stay in the service while your account exists. Uploaded files that you replace or remove from a page may remain in private storage until account deletion. Deleting your account removes your account, cloud journal, memberships and uploaded drawings from active storage. Support correspondence is kept as needed to respond to requests and maintain a support history. Backups and operational logs may remain for the providers’ retention periods or where required by law; we do not promise immediate removal from backups. Previously issued image links expire within an hour. Exported, downloaded or shared copies cannot be recalled, and local copies on other devices may remain until that app data is cleared.
Your choices and requests
You can edit your entries, export your saved journal and drawings from Settings, or use Settings → Delete account to delete your account and cloud work. Export anything you want to keep first. You can also use the contact form at stilldraw.com/#contact to request access, correction or deletion, or ask a privacy question. We may need to verify account ownership before acting on a request. Depending on where you live, you may have additional rights over your personal data or the right to contact your local data-protection authority.
Children and privacy
Stilldraw is a general-audience drawing journal and is not specifically directed at children. If you believe a child has provided personal information without the permission required where they live, use the contact form at stilldraw.com/#contact so we can investigate and address the request.
Changes and contact
We will update this page and its effective date if our data practices change. For material changes, we will provide an appropriate notice in the app or by email. Privacy contact: Yosel Del Valle, through the form at stilldraw.com/#contact.
Your website analytics choice
This choice applies to this browser on stilldraw.com. We also honour Do Not Track and Global Privacy Control. The journal and sign-in pages are always excluded.
Website analytics require JavaScript; without it, no page views are sent.