Privacy-First by Design
Stash is local-first: your tabs stay on your device unless you choose to create a shareable link. Here's exactly what happens — and what doesn't.
- No personal data is collected. We collect anonymous aggregate counters only (e.g. how often a feature is used) — never URLs, titles, tags, notes, or any identifier tied to you.
- All sharing happens locally in your browser. Stash selection and link generation occur entirely on your device.
- Default share links contain data only in the URL. Tab URLs and titles are compressed and encoded into the link itself and decoded in the visitor's browser; our servers never see them.
- Short links are stored server-side only when you choose that mode. The tab URLs and titles you selected are stored encrypted-in-transit in Cloudflare KV under a random id, never linked to you, and deleted automatically when the link expires (1–30 days).
- Links expire automatically. Shared content cannot be accessed once a link expires.
- The browser extension only sends anonymous counters. The Chrome and Firefox extensions run entirely on your device: snapshots are encoded locally and preferences are stored in local browser storage. The only network calls for telemetry are small, opt-out event names (e.g. "stash saved") — never tab URLs, titles, tags, notes, or an identifier tied to you.
- This website uses PostHog (cookieless) for analytics. We collect anonymous page views, clicks, and a small set of feature-usage event names only — no cookies, no persistent identifiers, no tab content.
← Back to home Last updated: 2026