Terms and privacy, in plain words.

Last updated: 23 September 2026.

This page is the agreement between you and OneStill. By creating an account, you accept it. It is short on purpose; if anything here is unclear, write to hi@onestill.day.

Who runs OneStill

OneStill is a personal, non-commercial project run by one person, a private individual living in Serbia. There is no company behind it. It has no ads, no paid plans and no investors, and I never sell your data or share it for marketing.

The service

OneStill is a photo diary: one photo a day, which stacks into weeks, months and years. You can keep it to yourself or let other people see it.

It is a small project kept alive in my free time, and it comes as is, without any guarantee: it may have bugs, be unavailable, lose data or be shut down. I back it up carefully and will try to give notice before closing it, but please keep your own copies of the photos that matter to you. To the extent the law allows, I am not liable for any loss caused by using OneStill or by it not working.

Your account

You must be at least 18 years old to create an account.

Use an email address that belongs to you: it confirms the account and restores the password. Keep your password to yourself; you are responsible for what happens in your account. Your username is permanent.

If a program or an AI agent runs your account, you are responsible for what it does, as if you did it yourself.

Your photos stay yours

You keep all rights to the photos, captions and comments you post. You give me only the permission the service needs: to store them, make resized copies and show them to the people you choose. This permission ends when you delete your account, except for copies left in older backups (see below).

Post only what you have the right to post. Nothing illegal, nothing sexual involving minors, no photos of other people shared against their will, nothing meant to harass, threaten or deceive. Don't spam, don't try to break or overload the service, and don't get into other people's accounts.

I may remove content or close an account that breaks these rules or the law, or puts the service or other people at risk. There is no report button yet: to report a member or a post that breaks these rules, or anything on OneStill that violates your rights, write to hi@onestill.day.

Who sees what

You choose the audience of your photos in Settings: only you; the people you follow who follow you back; or every member of OneStill. Anyone can sign up, so every member means anyone who creates an account.

Your username, display name and About are visible to every member, whatever audience you choose for your photos. Your email address and time zone are visible only to you.

When you narrow the audience, a photo link that someone has already opened can keep working for a short while.

What I collect and why

To run OneStill, I store your email address; a hash of your password, never the password itself; your username, display name, About, time zone and audience settings; your photos, captions, comments, reactions, follows and stills; the IP address and time of each sign-in. Server logs record requests with IP addresses, to protect the service and fix errors; they are kept for up to 14 days.

I keep the original file of every photo exactly as you uploaded it, which may include location and camera data. Nobody else ever receives the original: other people see only resized copies with that data removed.

I use all of this only to provide OneStill to you: no profiling, no advertising, no recommendations, no selling. The legal basis is that the data is necessary to provide the service you signed up for.

OneStill itself sets no cookies: your sign-in is kept in your browser's local storage and is removed when you sign out. Cloudflare may set a strictly technical cookie to tell people from bots.

Who else handles the data

The server with the database and the photos is in Canada. Encrypted backups are kept on a separate server in Germany.

All traffic passes through Cloudflare (USA), which protects the site and sees your IP address and requests; Cloudflare Web Analytics counts visits without cookies.

Account emails, address confirmation and password reset, are sent through Brevo (France). Brevo adds open and link tracking to them, and it can't be turned off on the plan OneStill uses; I don't look at those statistics and I send no newsletters. Letters you write to hi@onestill.day are kept in a Zoho Mail mailbox.

Keeping and deleting

Sign-ups that are never confirmed are deleted automatically after 24 hours.

You can delete your account at any time in Settings. This immediately removes your profile, photos, captions, comments (including those on other people's photos), reactions, follows and stills. A single photo can't be deleted: a day either has its photo or stays empty. Choosing the still of a week, a month or a year is final.

Backups are never edited once made and are currently kept indefinitely, so copies of deleted data stay in older encrypted backups.

You can ask me for a copy of your data, or to correct or delete it, by writing to hi@onestill.day from your account's email address. I will answer within 30 days. If you think I handle your data wrongly, please tell me first; you can also complain to the data protection authority of your country or of Serbia.

Changes and the law

I may change this text as OneStill changes. The date at the top shows the current version, and I will try to announce important changes in advance. If you keep using OneStill after a change, you accept the new version; if you don't agree, you can delete your account.

These terms are governed by the law of Serbia. That does not take away any rights the law of your own country gives you.