Privacy Policy
Last updated: February 2026
The Short Version
Stash is built with user privacy in mind. Your bookmarks and API keys stay on your device. We don't collect, store, or transmit your browsing data.
The Extension
Bookmark data is processed entirely within your browser. When you run the organizer, your bookmark titles and URLs are sent directly from your browser to the AI provider you selected (Google Gemini or Groq). This data is never routed through our servers.
API keys are stored locally using your browser's built-in storage (browser.storage.local). They are sent only to the AI provider's API endpoint and nowhere else.
Link checking makes HTTP requests from your browser directly to each bookmarked URL. No proxy or intermediary is involved.
Stash Pro
If you purchase a Stash Pro license, we collect your email address and payment amount to generate and deliver your license key. Payment is processed securely by Stripe — we never see or store your card details.
When you activate a license key, the extension sends the key and an anonymous device identifier to our server to record the activation. No bookmark data, browsing history, or personal information is transmitted during activation.
AI Processing & Data Transmission
When you initiate a bookmark scan, Stash sends your bookmark titles, URLs, and website meta descriptions to the AI provider you have selected in Settings (Google Gemini, or OpenRouter) for the purpose of categorizing your bookmarks into folders.
This data is sent as prompts to the AI provider's API using your own API key. Stash does not store, log, or retain any of the prompts or AI responses on our servers.
What is sent:
- Bookmark titles
- Bookmark URLs (domain names)
- Website meta descriptions (if available)
What is NOT sent:
- Passwords, cookies, or authentication tokens
- Browsing history beyond saved bookmarks
- Personal information not contained in bookmark data
AI processing only occurs when you explicitly click "Scan Bookmarks" or use the Watched Folder feature. No data is sent automatically in the background without your action.
Please refer to your chosen AI provider's privacy policy for how they handle data received through their API:
Third-Party Services
The only third-party services Stash communicates with are the AI provider you choose (subject to their own privacy policies) and, for Pro users, Stripe for payment processing and our license server for activation.
Contact
Questions? Reach out at hello@stashbookmarks.com.