Office apps that open fast. No bloat.

Privacy, in brief

• No ads, and nothing from anyone else, with one exception below. No analytics services or trackers, on this page or in the apps. What we count, we count on our own server, as set out below.
• A bot check, only when you’re signed out and send something to our server. When you ask for a sign-in code, answer a public form or join a board as a guest in your browser, Cloudflare Turnstile checks that you’re a person, not a bot: the page loads Cloudflare’s script for that moment only, and Cloudflare sees what its check needs from your browser (such as your IP address and browser details), under its Turnstile privacy addendum. We send Cloudflare nothing about you: our server passes on only the check’s token, to confirm it. The Mac apps never load it. Work you do signed out that stays in your browser is never checked. Requests from known bots are also left out of the counts below.
• Your email is for signing in, and for nothing else. Sign-in emails always come from stetley.com.
• Some apps never send us your work. Sheets on the web keeps workbooks in your browser until you sign in. Mail on the web goes from Google straight to your browser; no mail, password or token reaches our servers.
• Anonymous means no name. Notes and votes in an anonymous session, and answers to an anonymous form, carry no name and aren’t stored against your account. Nothing in Stetley shows who wrote or chose them.
• AI goes where you send it. Your device, your computer or your own key. Board’s AI is locked while people write alone, never votes, and sees only that board.
• What we count, on our own server. To see whether Stetley is working and growing, we keep totals: sign-ups and how many accounts were active each day (from sign-ins and the items you open from Home or Open, which our server already records), how many boards, decks, forms and docs are made, which file types are imported, how many boards had two people on at once, how fast pages load and our server answers, and whether we meet our service targets (how many answers fail, how many board and deck connections succeed, how many edits our server confirms within a second, and how many sign-in emails our mail provider accepts). They are kept as counts per hour or day for 90 days, with no name, email, address or document attached. That isn’t anonymity: our server knows who signed up and what they opened, as any server that signs you in does. These totals simply don’t add to it.
• Which features you use, per account. To decide what to improve, each app tells our server which of its features you used, as names and counts per day (for example “Sheets: sort, 3”), never what you wrote, titles, file names or addresses. Mail sends feature names only; your mail never reaches us. Stetley Notes on the Mac and iPhone sends these counts only while you’re signed in to Stetley sync (for example “Notes: search, 4”, or how many times it refused an out-of-date copy from our server), never a note, a title or what you searched for. These counts are kept with your account for 180 days, and as totals with no account for two years. We use them to see which features are used, and to offer new options first to groups such as people who use an app a lot. You can turn this off in Profile (“Help improve Stetley with usage counts”): nothing more is sent, and what we kept for your account is deleted at once. Profile also downloads a copy of what we keep.
• How Stetley spreads, and what it costs to run. We note who invited you, to measure how Stetley spreads: if you joined through someone’s board, deck, form, doc or project, or they added your email before you had an account, our server keeps which account it was with yours. We also count per day, for your account, how many requests your apps make to our server, the emails we send you, saves of your documents to storage, the invites you make, the people who join through you and the sessions you run with others: numbers only, kept 180 days. From these our team works out roughly what each account costs to run and how people bring others in. The same Profile switch (“Help improve Stetley with usage counts”) covers all of this: off, none of it is kept and what we had, who invited you included, is deleted at once. Profile’s download includes it.
• The occasional question. Now and then an app asks how likely you are to recommend it, at most every 90 days and never in your first week. Your score and any comment you choose to write are kept without your name or account; comments for 180 days, scores for two years. Our server notes when it last asked you, so it doesn’t ask again too soon. “Don’t ask again” means exactly that.
• Stetley Notes sync is end-to-end encrypted. Our server can’t read your notes. It does see, and our team can see, what it needs to sync them: how many encrypted records and files your library has and how large they are, how many devices you have, when your library last synced, and how many devices were approved or removed. Never a title, a word or a file name.
• Plans and storage. Our team can see each account’s plan, how much storage it uses, how many items it opened recently, its feature counts, its estimated running cost and who it brought in, to run the service and decide what to build. Never the content of your work.
• New features may reach some accounts first. Which ones is worked out from your account’s ID, so it stays the same each visit. Nothing is recorded about it.
• One trade-off we chose, stated plainly: Home keeps the exact time you last opened each item, to sort your Recent list. Someone with access to our database could line those times up with activity on an anonymous board or form.