Stillbloom Studio
Privacy Policy
Last updated: 8 October 2026
The short version, for grown-ups
- Children can read the story, color pages and play with Shiver without giving us any information at all.
- There are no accounts, no chat, no advertising, no analytics and no tracking cookies.
- Fonts, scripts and pictures come from this website only, so nothing is sent to Google or other companies when the page loads.
- The only place we receive personal information is the contact form, which is for adults only.
1. Who we are
This website is run by Stillbloom Studio, an independent publisher of coloring books based in Israel ("we", "us"). We decide how the information described here is used, which makes us its controller. To reach us, a grown-up can use the contact form and choose the topic "Privacy request".
2. Children's privacy
Parts of this website are made for children aged 5 to 9. We designed it so that children never need to share personal information:
- We do not ask children for their name, email address, photo, voice or location.
- Children cannot create an account, chat, post or send messages to anyone.
- The contact form and the launch list are for adults only. The contact form asks for the year of birth and does not send anything if the person is under 18. The year of birth itself is checked in the browser and is never sent to us.
- If we learn that we received personal information from a child under 13, or under 16 in the European Economic Area or the United Kingdom, we will delete it.
We follow the principles of the U.S. Children's Online Privacy Protection Act (COPPA), the GDPR's rules for children, and the Israeli Protection of Privacy Law. A parent or guardian can contact us at any time with questions about a child's privacy.
3. What happens on your device
- Coloring corner: pages are colored entirely in your browser. Nothing you color is uploaded. If you save a picture, it goes straight to your device.
- "Read it to me": the story is read aloud by your device's own speech engine. We choose a voice that runs on the device when one is available. Some browsers only offer voices from the browser maker's online service; in that case the browser may send the story text, which contains no personal information, to that service.
- Settings: the website remembers whether you paused the animations, using your browser's local storage. This setting stays on your device and is never sent to us.
4. Information from grown-ups
| Information | Why we use it | Legal basis | How long we keep it |
|---|---|---|---|
| Contact form: topic, name, email address and message | To read and answer your message | Your request, and our legitimate interest in answering it | Up to 12 months, then deleted automatically |
| A scrambled code made from your IP address (a keyed hash; the address itself is never stored) | To block spam and limit how many messages one connection can send | Our legitimate interest in keeping the form free of abuse | 30 days |
| Technical data handled by our host, such as IP address and browser type | To deliver the website and protect it from attacks | Our legitimate interest in running a secure website | Kept by Cloudflare under its own rules |
| Launch list email address (not open yet) | To tell you when the book is available | Your consent, which you can withdraw at any time | Until you unsubscribe |
Writing to us is optional. If you do, the topic, your name, email address and message are required so that we can answer you; without them we cannot reply. The launch list is not collecting addresses yet. Before it opens we will update this policy to name the email service we use.
5. Things we never do
- We do not sell or rent personal information or share it for advertising.
- We do not show ads, use analytics tools, advertising pixels or social media widgets.
- We do not build profiles or make automated decisions about anyone.
- We do not set cookies for visitors. (The only cookie is a login cookie the site owner uses to read messages.)
6. Who else handles the information
The website and the contact database run on Cloudflare, Inc., our service provider (processor). Messages are stored in a Cloudflare database located in Western Europe. Where information moves outside Israel or the European Economic Area, Cloudflare provides recognized safeguards such as the European Commission's Standard Contractual Clauses. Links to Amazon take you to Amazon's website, where Amazon's own privacy notice applies. We may disclose information if the law requires it.
7. Your rights
You can ask us to tell you what information we hold about you or your child, give you a copy, correct it, delete it, or stop using it. These rights come from the Israeli Protection of Privacy Law, 5741-1981, and for people in the European Economic Area or the United Kingdom also from the GDPR, which lets you complain to your local data protection authority. In Israel, the supervisory authority is the Privacy Protection Authority. Use the contact form with the topic "Privacy request". We may ask you to confirm your identity and will answer within the time the law allows, normally within 30 days.
8. Security
The website is served over an encrypted connection (HTTPS). Messages are kept in a private database that only the site owner can open, behind a password, and IP addresses are never stored in readable form.
9. Changes
If we change how we handle information, we will update this page and the date at the top, and say so clearly on the website when the change is significant.