StenstillStenstill

Privacy Policy

Last updated: July 29, 2026

Stenstill (“Stenstill”, “we”, “us”) is a product of BravyCode. This policy explains what information we collect when you use stenstill.comor the Tattoo Stencil Maker mobile app for Android and iOS (together, the “Service”), how we use it, and the choices you have. By using the Service you agree to this policy.

1. Information we collect

  • Account and user identifiers. When you create a website account we collect your email address and a password (stored securely by our authentication provider, never in plaintext). If you sign in with Google, we receive your name, email address, and profile picture from Google. We create an anonymous Firebase user identifier when you first use cloud features. The mobile app currently uses this anonymous identifier and does not require an email or named account.
  • Content you provide. Photos you upload, the text prompts you write, and the stencils you generate and choose to save to your projects.
  • Usage and device data.Basic technical information such as your browser type or mobile device operating system, your device’s IP address, the pages or screens you visit and when, time spent using the Service, generation counts (used to enforce fair-use limits), app version, device and app-instance identifiers, interactions with features, and crash, performance, and error logs.
  • Approximate location. We do not collect precise location data. We may derive your approximate geographical location (e.g., from your IP address) for analytics, fraud prevention, advertising attribution, and improving the Service.
  • Purchase information. Website purchases are processed by our payment provider, and mobile purchases are processed by the applicable app store and our subscription-management provider. We receive the product, price and currency, trial or subscription status, renewals, cancellations, expirations, and refunds. Payment and app store providers may collect contact, billing, payment-method, and transaction details under their own privacy notices. We do not store your full payment card number.
  • Advertising and attribution data (mobile app).We may receive or share the advertising source, campaign and ad-click information that led to an install, along with installation, session, and subscription events. Depending on your platform settings this may include the iOS Identifier for Advertisers (IDFA), Android advertising ID, Identifier for Vendor (IDFV), Tenjin Analytics Installation ID, Facebook anonymous ID, Firebase app-instance ID, and IP address. On iOS, we access the IDFA only after you grant permission through Apple’s App Tracking Transparency prompt. Apple Search Ads attribution may also include Apple-provided campaign, ad-group, keyword, ad, country or region, and conversion information. This limited Apple attribution does not require access to the IDFA.

2. How we use your information

  • To provide the Service — generate stencils and save your projects.
  • To operate your account and let you sign in across sessions and devices.
  • To process purchases and manage subscriptions.
  • To enforce fair-use limits and prevent abuse of the Service.
  • To diagnose problems, maintain security, and improve the product.
  • To attribute installs and subscriptions to advertising campaigns, measure advertising performance, detect attribution fraud, and optimize advertising for Stenstill.
  • To contact you with important information, required notices, and (where permitted) marketing communications you can opt out of.

3. Service providers and how stencil generation works

To turn a photo or prompt into a stencil, we send the image and/or text you provide to vetted third-party AI image-processing providers, which process it solely to return a generated image. We rely on the following categories of service providers to run Stenstill:

  • Firebase — authentication, database and storage, usage analytics, app instance identifiers, and crash diagnostics. See the Firebase privacy information.
  • AI image-processing providers — generating stencils from the photos and prompts you submit.
  • Website hosting, analytics, and payments — Vercel hosts the website and provides cookieless traffic analytics. Google Analytics loads only after you accept analytics cookies. Dodo Payments processes website purchases as our payment provider and merchant of record. See the privacy notices for Vercel, Google, and Dodo Payments.
  • App stores and subscription management — Apple and Google process mobile payments. RevenueCat validates receipts and manages trial, subscription, renewal, cancellation, expiration, and refund status. The Android app also uses Google Play Services. See the RevenueCat privacy notice.
  • Mobile product analytics and diagnostics — PostHog processes app screens, feature interactions, onboarding choices, and technical events so we can understand and improve the mobile experience. See the PostHog privacy notice.
  • Mobile attribution and advertising measurement — Apple Search Ads and AdServices provide campaign-attribution information for installs originating from Apple advertising. Tenjin measures which campaigns lead to installs and subscription outcomes and helps detect attribution fraud. Meta receives permitted device and subscription-event data to measure and optimize advertising for Stenstill. See the privacy notices for Apple Advertising, Tenjin and Meta.

We do not sell your personal information, and we do not use your uploaded photos or prompts to train our own models. We may disclose information where required by law, to protect rights or safety, or to investigate fraud. We require providers that process data for us to protect it consistently with their agreements with us and applicable law. A current list of our service providers is available on request at contact@stenstill.com.

4. Storage and retention

Saved projects and their images remain until you delete them or delete the related account. Registered website users can delete their account and associated projects from Studio Settings. The mobile app currently uses an anonymous service identifier rather than an email or named account; mobile users can delete individual projects in the app and may request deletion of associated server-side data by contacting us. Anonymous identifiers, usage data, diagnostics, attribution data, and subscription records are retained only as long as reasonably needed for the purposes described above, provider configuration, fraud prevention, accounting, dispute resolution, and legal obligations. A deletion request may not remove records that we must retain by law or for legitimate transaction and security purposes.

5. Your choices and rights

  • You can delete individual projects from the Studio or mobile app.
  • Registered website users can delete their account and associated data from Studio Settings. Mobile users and anyone who cannot access that control can request deletion by contacting us.
  • Website analytics cookies are optional. You can accept or decline them in the cookie banner and clear your browser storage to reset your choice.
  • On iOS, you can allow or deny tracking when the App Tracking Transparency prompt appears and change that choice later in iOS Settings. If you deny permission, we do not access the IDFA. On Android, you can manage or reset the advertising ID through your device settings. These choices do not restrict the app’s core features or your ability to purchase or manage a subscription.
  • Uninstalling the mobile app stops future collection from that installation but does not by itself delete information previously retained by us or our providers.
  • You may request access to, correction of, or deletion of your personal information by emailing us at contact@stenstill.com.

6. Advertising, tracking, and sale of data

We do not sell your personal information for money. We share limited mobile device identifiers, installation and usage events, and purchase or subscription events with Tenjin and Meta to attribute advertising, measure campaigns, detect fraud, and optimize advertising for Stenstill. For Apple Search Ads, Apple provides limited campaign attribution data to RevenueCat so we can measure subscription outcomes from those ads. Some privacy laws may describe certain attribution activity as “sharing,” targeted advertising, or tracking. We do not send your uploaded photos, prompts, or generated stencil images to Apple Search Ads, Tenjin, or Meta.

Where platform permission is required, this advertising use is subject to that permission. Declining Apple’s tracking prompt prevents access to the IDFA, but does not stop essential subscription processing, fraud prevention, non-tracking analytics, or limited attribution using signals permitted by Apple. You may also contact us to exercise any applicable opt-out rights.

7. Data transfers

Our providers process data on servers that may be located in the United States and other countries. By using the Service you understand your information may be processed outside your country of residence.

8. Security

We use reputable providers and industry-standard physical, electronic, and procedural safeguards to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children

The Service is not directed to children. It is intended for adults, and you should not use it if you are under 16. We do not knowingly collect information from children under 16. If you believe a child has provided us personal information, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above, and significant changes will be reflected on this page. Continued use of the Service after changes means you accept the updated policy.

11. Contact

Questions about this policy or your data? Email contact@stenstill.com or bravycode@gmail.com.