Privacy Policy

What We Capture

StashPad captures what you browse so you can find it again later. That includes:

• URLs and page metadata from sites you visit while the extension is active — page titles, visit timestamps, and OpenGraph/structured metadata (author, published date) where available
• Page content only from sites where you have explicitly enabled a Connection
• Your queries inside the StashPad interface
• Basic usage analytics (feature usage, error logs) so we can fix bugs and improve the product

Connections

StashPad has optional "Connections" that capture activity from sites you're already logged into. These cover the kinds of things normal browsing capture doesn't see, like what you watched on Netflix. Connections are off by default. You turn on the ones you want, and you can turn them off just as easily.

What Connections capture

When you enable a Connection, StashPad reads your activity page on that site and captures:

• Titles of items (e.g. movie or show titles)
• Timestamps (when you watched, listened, or interacted)
• Item IDs that the site uses to identify the content

Connections never capture your credentials, passwords, payment information, or anything beyond the activity listed above.

Currently supported Connections

• Netflix: watch history (titles, dates watched)
• Prime Video: watch history (titles, dates watched)
• Amazon Shopping: order history (items, dates)
• Spotify: listening history (tracks, artists, dates)
• YouTube: watch history (video titles, channels, dates)
• Substack: reading activity (posts opened, dates)
• Chrome History: imports existing browsing history (URLs, page titles, visit times)

This list is updated as we add new Connections.

Disabling a Connection

You can disable any Connection at any time from the extension settings. Disabling one stops capturing from that site, revokes the browser permission for that domain, and deletes the data that Connection captured. Uninstalling the extension also deletes all Connection data.

You can also request deletion of Connection data by contacting contact@stashpad.ai.

Where Your Stash Lives

Local Storage (Default)

Your stash lives in your browser using IndexedDB. That means:

• It stays on your device, and nothing is sent anywhere
• It's protected by your browser's built-in encryption
• You can delete any of it (or all of it) from the extension settings
• Uninstalling the extension deletes it all automatically

Cloud Sync (Pro Plan)

If you turn on cloud sync with a Pro subscription:

• Data is encrypted in transit using TLS 1.3
• Data is encrypted at rest using AES-256 on Google Cloud Platform
• Access requires authentication through your StashPad account

How We Use It

Your stash is only used for:

• Search: finding what you're looking for when you ask
• Recall: surfacing related items and summaries when it's useful
• Sync: keeping your stash available across your devices (Pro users)
• Product improvement: aggregated, anonymized usage patterns help us fix bugs and ship the right features

AI Processing

When you search StashPad, we use Google's Gemini 2.5 Flash API (paid tier) to interpret your query and generate natural-language results. Here's exactly how that works:

• Your search query and the specific items from your stash relevant to that query are sent to the Gemini API.
• We do not send your full stash to Gemini — only the items retrieved as relevant to your specific query.
• Gemini API processes this data under Google's commercial API terms, which prohibit using customer data to train models.

Analytics

StashPad uses Google Analytics to understand how the product is used and to fix bugs. We send:

• Aggregated usage events (e.g. "connector enabled", "search performed", "error encountered")
• Standard analytics signals (browser version, extension version, country-level location)

We do not send the contents of your stash, your search queries, or any item titles to Google Analytics. Analytics data is processed under Google's standard data processing terms.

If you'd prefer to opt out of analytics, you can disable it in the extension settings.

Your Controls

You have complete control over your stash:

Local Data (All Users)

• View everything in your stash through the extension
• Delete individual items or entire date ranges
• Exclude specific sites from capture going forward
• Export your stash in standard formats (JSON, CSV)

Cloud Data (Pro Users)

• Delete individual items or date ranges from the extension
• Request full account and data deletion via contact@stashpad.ai
• Download your full stash as an archive before deleting
• Change your data storage region at any time

How Long We Keep It

Your stash sticks around as long as you want it to:

Local Storage

• Your stash stays until you delete it or uninstall the extension
• No automatic deletion or expiration
• 30-day history limit for free users
• Disabling a Connection deletes that Connection's data immediately

Cloud Storage

• Pro users get unlimited retention
• Account deletion requests are processed within 30 days
• Backup copies are purged within 90 days of the deletion request

Chrome Web Store Limited Use Disclosure

StashPad's use and transfer of information received from Google APIs and from connected services adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Specifically:

• We only use this data to provide and improve the user-facing features described in this policy.
• We do not transfer this data to third parties except as necessary to provide and improve those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to affected users.
• We do not use this data for serving advertisements.
• We do not allow humans to read this data unless we have your affirmative agreement, it is necessary for security purposes, to comply with applicable law, or the data has been aggregated and anonymized.

Policy Updates

When we update this policy, we'll:

• Update the "Last updated" date at the top of this page
• Email Pro users if changes are significant
• Show an in-app notification about the changes
• Keep previous versions available for reference

Continuing to use StashPad after an update counts as accepting the new terms.