← Stash

Stash

Privacy policy

No account, no analytics, no ad trackers. Your library lives on your device by default. Turning on cross-device sync (optional) sends your article bodies and highlights to our server only as end-to-end encrypted ciphertext we cannot read.

What we collect

By default, nothing. Stash stores your saved articles, newsletters, PDFs, highlights, and reading position locally in your browser (IndexedDB). We have no accounts, no sign-up, and no analytics or ad trackers of any kind, on or off.

If you turn on cross-device sync

Sync is off until you turn it on. When you do, Stash pairs your devices with a code (no email, no password) and syncs through our Cloudflare Worker. Two kinds of data travel to that server:

• Article bodies and highlights: encrypted end-to-end (AES-GCM) in your browser before they ever leave it. The encryption key is derived from your pairing code and never sent to us. We store only ciphertext; we cannot read your saved reading.
• Metadata: the URL, title, excerpt, tags, and read/starred flags for each item are stored in plaintext on our server, by design, so a new device can show your shelf and search it before downloading any bodies. Treat your pairing code like a password: anyone who has it can read this metadata.

Turning sync off on a device stops that device syncing; your saved reading stays on it either way.

Saving a page

Saving from the extension reads the already-open page in your browser directly. That page load doesn't route through us. The web app (no extension installed) asks our server to fetch and clean a URL you give it, since a browser page can't fetch another site's HTML directly; we don't store what you save through that fetch.

Optional features that send content to us for one request

These only run when you tap the button, never automatically or in the background:

• AI summarize: sends the plaintext of the one article (or the titles/excerpts of your unread shelf, for a digest) to Cloudflare Workers AI to generate a summary. Not stored after the response; not used to train anything.
• Send to Kindle: builds the EPUB in your browser, then relays it through our server to your Kindle email address via our email provider (Resend). The file is only handled for that one delivery.
• License unlock: verifying a purchased license key sends the key to our server, which checks it against Gumroad's license API. No article content is involved.

Permissions, and why (Chrome extension)

• Storage: to keep your saved library on your device.
• Active tab / scripting: to read the page you ask Stash to save, only when you click Save or use the shortcut.
• Context menus, notifications, alarms: the right-click "Save to Stash" menu, a save confirmation, and periodic background sync (only if you turned sync on).

Third parties

No advertising and no third-party analytics SDKs. The services above (Cloudflare, Resend, Gumroad) each see only what's described next to them, never a full picture of your library, and never for advertising.

Payments

Stash is a one-time purchase processed by Gumroad. Gumroad handles your payment details; we never see or store your card information, only your email and purchase confirmation for license verification.

Children

Stash is a general-audience reading app and is not directed at children.

Changes

If this policy changes, the date below changes with it.

Contact

Questions: hello@epiphani.com.

Stash is an Epiphani Studios app. Last updated July 2026.