Stash

Privacy Policy

Last updated: July 30, 2026 · Contact: pgalichia@gmail.com

Stash is a Chrome extension that lets you save products from retailer pages into personal lists, organize them, and optionally publish a list as a public web page. This policy describes exactly what data Stash handles and where it goes. The short version: your saved items live on your device, there are no accounts, and nothing is sold or used for advertising.

Data stored on your device

Everything you save — product titles, images, URLs, prices, sizes, colors, notes, and list names — is stored locally in your browser using Chrome's extension storage (chrome.storage.local). Stash has no user accounts and no login. Uninstalling the extension deletes this data.

Stash also keeps a small local usage log (for example, when you save an item or open your dashboard) so the extension can show you your own activity summary in Settings. This log never leaves your device.

Data sent to our server

Some features are powered by a server we operate (a Cloudflare Worker). When you use them, the following data is transmitted:

• AI suggestions and captions: product metadata from your saved items (titles, brands, categories, prices) is sent to our server, which forwards it to Anthropic's Claude API to generate suggestions and short descriptions. It is not stored on our server.
• Product search: search queries derived from item titles/brands are sent to our server, which queries SerpAPI (Google Shopping results).
• Image loading:strong> product image URLs may be proxied through our server so images display reliably.
• Rate limiting: our server uses your IP address transiently to enforce per-minute rate limits and prevent abuse. IPs are used for counting within a rolling window and are not retained as logs of your activity.

Published share pages

Sharing is entirely opt-in. When you click "Publish" on a list, the contents of that list (item titles, images, prices, links, and the title/subhead you chose — plus your first name, if you added one in Settings) are uploaded to our server and become publicly visible to anyone who has the linkstrong>. Share pages are stored on Cloudflare (Workers KV) and expire automatically after about 90 days. If you want a page taken down sooner, email us and we will remove it.

Share pages include simple aggregate counters: how many times a page was viewed and how many times a "Shop now" link was clicked. These are anonymous totals — no cookies, no visitor identifiers, and no tracking of who viewed the page.

Optional keys you provide

Settings offers optional fields for your own Anthropic API key or GitHub token (used only for an alternative sharing method via GitHub Gists). If provided, these are stored locally on your device and sent only to Anthropic or GitHub respectively when used. They are never sent to our server.

What we do not do

• We do not sell, rent, or share your data with third parties for their own purposes.
• We do not show ads or use your data for advertising.
• We do not track your browsing. The extension only reads a page when you click the Stash button on it (via Chrome's activeTab permission).
• We do not collect analytics that identify you.

Third-party services

Features described above rely on: Cloudflarea> (hosting, storage), Anthropica> (AI generation), SerpAPIa> (product search), Google Fontsa> (typefaces on share pages), and optionally GitHuba> (Gist sharing, only if you configure it). Each processes data under its own privacy policy.

Chrome Web Store disclosure

Stash's use of information received from Google APIs and Chrome permissions adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. Data is used solely to provide the user-facing features described here.

Changes

If this policy changes materially, we will update this page and the "last updated" date above.

Questions or removal requests: pgalichia@gmail.coma>