Privacy Policy
Stash is built on a simple principle: your data is yours. Nothing leaves your device unless you explicitly enable a feature that requires it.
What Stash stores
Stash is a Chrome extension that replaces your new tab page. Everything you create in Stash — links, notes, habits, focus history, settings, workspaces, themes — is stored locally on your device using Chrome's chrome.storage.local API.
No account is required. No data is uploaded to any server operated by the developer of Stash or any third party. If you uninstall Stash, your data is removed with it. You can export a JSON backup of everything from the settings panel at any time.
Permissions and what they're used for
Stash requests the following Chrome permissions, each used solely on your device:
Saves your links, notes, habits, and preferences locally. No external storage is used.
Requests favicons (small site icons) through Chrome's local favicon service so saved links display the correct icon. No request leaves your computer.
Optional. When the "Top sites" section is enabled, Stash reads your most-visited Chrome sites locally to display them on the new tab. This data is never transmitted.
Optional. When you use the command palette (Cmd/Ctrl + K), Stash queries your Chrome bookmarks locally so you can find them quickly. No bookmark data is transmitted.
Optional. When the "Recently closed tabs" section is enabled, Stash uses Chrome's sessions API locally to list tabs you've recently closed so you can restore them. No data is transmitted.
Used only by the toolbar popup. When you click the Stash icon in your Chrome toolbar to save the current page, Stash reads the active tab's URL and title to pre-fill the save form. The popup never reads other tabs and never transmits data.
Used by the background focus (Pomodoro) timer to know when a work or break phase ends, so the timer keeps working even when the new tab is closed. The alarm is a local scheduling primitive — no data is sent anywhere.
Shows a desktop notification ("Focus session complete" / "Break over") when a Pomodoro phase ends and the new tab page isn't open. The notification stays silent if the new tab is already showing, so you don't get a double alert. Used only for the focus timer.
The one outbound request
If you enable the optional Weather widget in settings, Stash sends your configured city's geographic coordinates to api.open-meteo.com to retrieve the current temperature and weather condition. Open-Meteo is a free public weather API that does not require an account or API key.
This is the only external network request Stash will ever make. It only runs when the weather widget is on, refreshes at most once every 30 minutes, and is disabled by default. If you don't turn on the weather widget, Stash makes no network requests at all.
What Stash does not do
- No analytics, telemetry, or usage tracking of any kind.
- No advertisements.
- No third-party integrations beyond Open-Meteo (for weather, only if enabled).
- No accounts, no sign-in, no email collection.
- No syncing across devices through a Stash server (you can move data manually with JSON export and import).
Children's privacy
Stash does not collect personal information from anyone, including children under 13.
Changes to this policy
If this policy changes — for example, if a new feature requires a new permission or network request — the change will be reflected here and the "Last updated" date above will be revised. Material changes will also be noted in the extension's update changelog.
Contact
Questions or concerns about privacy in Stash? Reach out to Lerisokhadze@gmail.com.