Privacy Policy

When you use Stash, we collect and process the following information:

• Account information used for sign-in, such as your Google account identifier, name, and email address.
• Links you save, including the URL, page title, source site, save time, read/archive/pinned status, and user-selected actions.
• Link metadata generated for saved links, such as summaries, categories, tags, thumbnails, favicons, and estimated source platform.
• Authentication tokens needed to keep the extension and apps connected to your Stash account.
• Basic technical information needed to operate and secure the service, such as API requests and error states.

The Stash browser extension uses Chrome permissions to save the tab you choose to save.

• activeTab/tabs: used to read the URL of the current tab when you click Save or use the keyboard shortcut.
• storage: used to store your Stash server URL and authentication token locally in Chrome extension storage.
• host permissions/content script: used to show an on-page confirmation after a save action and to refresh an open Stash tab after saving.

The extension does not collect your full browsing history. It sends a page URL to Stash only when you explicitly save that page.

• To authenticate you and keep your Stash library private to your account.
• To save, display, search, filter, archive, and delete your saved links.
• To enrich saved links with useful metadata such as summaries, tags, categories, thumbnails, and source type.
• To detect duplicate saved links and keep your library organized.
• To debug, secure, and improve the Stash service.

Stash may process saved link content or metadata to generate summaries, categories, and tags. This processing is used only to provide Stash features for your saved links. Stash does not use your saved links for advertising.

• Stash does not sell your personal information.
• Stash does not use saved links for targeted advertising.
• Stash does not collect browsing history beyond the links you explicitly save.
• Stash does not transfer your data to data brokers or advertising networks.

Stash's use and transfer of information received from Chrome extension APIs complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

• Stash uses Chrome extension data only to provide or improve user-facing Stash features.
• Stash transfers extension data only as necessary to provide Stash features, comply with law, protect security, or complete a merger, acquisition, or sale of assets.
• Stash does not use or transfer extension data for personalized advertising, retargeting, or interest-based advertising.
• Stash does not allow humans to read user data unless the user consents for support, it is necessary for security, it is required by law, or the data is aggregated and anonymized for internal operations.

Stash uses third-party providers only as needed to run the product:

• Google OAuth for sign-in.
• Hosting, database, and storage providers for the Stash web service.
• Metadata and AI processing providers for link enrichment features.

These providers process data only as needed to provide Stash functionality, security, and infrastructure.

Stash stores saved links and account data on its backend. The browser extension stores your Stash API token locally in Chrome extension storage so you can stay signed in. Data is transmitted to the Stash backend over HTTPS when using a deployed Stash server.

Saved links remain in your Stash account until you delete or archive them. You can delete individual saved links from the Stash app. To request deletion of your account and associated saved link data, contact us using the email below.

Stash is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

We may update this Privacy Policy when Stash changes. The latest version will always be available at this page.

For privacy questions or deletion requests, email adamale@asu.edu.