Legal
Privacy
Last updated 22 September 2026
STNC is quiet by default. We build small software that should not want your attention, and we do not collect data for its own sake. This page explains what that means for stnc.com, RotaBall, Savor and Outflow.
Who we are
The controller for personal data described here is STNC LTD, registered in England & Wales under company number 14679419. Questions about this policy: support@stnc.com.
What this covers
- The company site at stnc.com
- RotaBall at rotaball.stnc.com and its app store builds
- Savor at savor.stnc.com, which also publishes its own policy
- Outflow at outflow.stnc.com, which also publishes its own policy
Accounts
RotaBall has no accounts. Savor and Outflow do, because they keep things for you — recipe books in one case, financial records in the other. Each account holds what that product needs to work and nothing more. Both products publish their own detailed privacy policy, and where those differ from this page for that product, the product policy applies.
Company website
The STNC company site is static. No account is needed to read it. Hosting and delivery may produce ordinary server or CDN logs (for example IP address, browser type and requested URL) for security and reliability. We do not use those logs to build marketing profiles.
RotaBall
RotaBall is a puzzle. There are no accounts and no ads in the puzzle itself. Ten levels run free in the browser; progress is kept with passwords you control. We do not need a personal profile to let you play.
App stores may process purchase, download or crash data under their own terms when you install from them. That processing is controlled by the store, not by STNC.
Savor
Savor is a recipe book, and it needs an account so your books can follow you between phone and web. You sign in with Google, Apple or email; we hold the identifier, email address and display name that sign-in provides, plus your language and measurement preferences.
Your recipes, photos, notes, book memberships and any share links you create are stored so the product can do what you asked. When you import a recipe from a photo, link or pasted text, that content is sent to AI models to read and structure it; recipes you type in by hand are not. If you join the waitlist before launch, we use that email only to tell you when Savor is ready. Savor's own policy at savor.stnc.com/privacy has the detail, including account deletion.
Outflow
Outflow is an expense manager, so its account holds financial data: the bank and card transactions you connect through regulated aggregators (Plaid, TrueLayer) or import from statements, plus the categories, budgets and recurring-charge detections built from them. Sign-in supports two-factor authentication, and bank access tokens are encrypted at rest.
Because that data is more sensitive, Outflow publishes its own detailed privacy policy and data retention notice at outflow.stnc.com/privacy, including how to wipe financial data or delete an account.
Cookies and analytics
We do not run third-party advertising trackers on the company site. If a product needs a cookie or similar storage to function (for example to keep a session or a preference), we keep it to what the feature requires. We prefer none where none are needed.
Contact email
If you write to support@stnc.com, we use your message and address to reply and to fix problems. We keep correspondence only as long as it is useful for that purpose.
Sharing
We do not sell personal data. We use infrastructure providers (hosting, sign-in, email delivery, bank aggregators, AI processing for recipe imports, app stores) that process data on our instructions or under your consent to run the sites and products. We may disclose information if the law requires it.
Retention
We keep personal data only while it is needed for the purpose it was collected: account and product data while your account exists, waitlist emails until you leave the list or the product launches, support mail until the conversation is resolved. Server logs are rotated in the ordinary course of operations. Savor and Outflow each describe their own retention and deletion in their policies.
International transfers
Some providers may store or process data outside the United Kingdom. Where that happens we rely on appropriate safeguards under UK data protection law.
Your rights
Under UK GDPR you may have rights to access, correct, delete or restrict personal data we hold about you, and to object to certain processing. To exercise those rights, email support@stnc.com. You can also complain to the Information Commissioner's Office (ICO).
Children
Our products are not directed at children under 13. If you believe we have collected personal data from a child inappropriately, contact us and we will delete it.
Changes
When this policy changes we update the date at the top of this page. Material changes to how a product handles personal data are called out in that product where practical.