Stilly Transfer is the file-sharing service of The Stillery B.V. (“The Stillery”, “we”), based in the Netherlands. The Stillery is the controller for the personal data described below. You can reach us at info@the-stillery.nl.

Stillery team members upload files and share them through a download link, optionally delivered by email. Recipients can download the files without an account.

Uploaded files. The files themselves and their metadata (filename, size, upload date). Files may contain personal data; the sender is responsible for having the right to share them.

Sender account data.The sender’s @the-stillery.nl email address, used to sign in via magic link and shown on the download page so recipients know who sent the transfer.

Recipient email addresses.Only when the sender chooses email delivery. They are used solely to send that transfer’s download link and, shortly before the link expires, a one-time expiry reminder. They are stored with the transfer, deleted automatically once it expires, and never used for marketing or shared with third parties for their own purposes.

Anonymous usage statistics. We count page opens, file downloads and shop-button clicks per transfer to learn which backgrounds work. These events contain no IP address, no browser details and no cookies — they cannot be traced to you.

Technical data. Standard server and security logs (IP address, browser type, timestamps) needed to run and protect the service.

To deliver the transfer you or your contact at The Stillery requested (performance of that service), and to keep the service secure and working (legitimate interest). We do not sell data, we do not run advertising, and we do not use the contents of your files for anything other than storing and delivering them.

Files are available until the expiry date the sender chose when creating the transfer, after which the download link stops working and the files are removed from active use. Recipient email addresses are deleted automatically when the transfer expires. Transfer records (who sent what, and when) are kept for administration purposes. Technical logs are kept only as long as needed for security and troubleshooting.

Files and data are stored and processed within the European Union. We use a small number of processors to run the service: Supabase (storage, database and authentication), Vercel (hosting) and Resend (email delivery of download links). Each acts only on our instructions under a data processing agreement.

Stilly Transfer uses only functional cookies that keep senders signed in. There are no tracking, analytics or advertising cookies, so there is no cookie banner to click.

Under the GDPR you can ask us to access, correct, delete or export the personal data we hold about you, or object to a specific use. Email info@the-stillery.nl and we’ll respond within a month. If you received files you believe should not have been shared, contact us and we can disable the link. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

We may update this statement when the service changes; the date at the top always reflects the latest version.