Privacy Policy

Stashly ("we", "us", "our") is a link-saving and organisation service operated by Stashly (stashly.pro). This policy explains what personal data we collect, why we collect it, and your rights over it.

Account information

When you sign up we collect your email address. If you sign in with Google we also receive your name and profile picture from Google, which you can update or remove at any time.

Content you create

Links, titles, tags, descriptions, collections, and any other content you save inside Stashly are stored on our servers so we can show them back to you.

Usage data

We collect standard server logs (IP address, browser/device type, pages visited, timestamps) to operate and improve the service. We do not sell this data.

Cookies

We use a single session cookie to keep you logged in. We do not use advertising or tracking cookies.

• To provide and operate the Stashly service
• To authenticate your identity and protect your account
• To send transactional emails (magic links, account notices)
• To diagnose bugs and improve performance
• To comply with legal obligations

We will never sell your personal data or use it for advertising.

Your data is stored on Supabase infrastructure hosted in the EU (Frankfurt). All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access to production data is restricted to authorised personnel only. We follow industry-standard security practices and conduct regular security reviews.

We do not sell or rent your personal data. We share data only with:

• Supabase — our database and authentication provider
• Google— if you use Google Sign-In (governed by Google's privacy policy)
• Law enforcement or regulators where required by applicable law

If you mark a collection as public, anyone with the link can view it. Links inside a public collection are visible without signing in. You can make a collection private again at any time, which immediately removes public access.

We retain your data for as long as your account is active. If you delete your account, we permanently delete all associated data within 30 days, except where we are required to retain it by law.

Depending on your location you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your data in a machine-readable format
• Withdraw consent where processing is based on consent

To exercise any of these rights, email us at privacy@stashly.pro. We will respond within 30 days.

Stashly is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

We may update this policy from time to time. We will notify you of material changes by email or by a notice in the app. Continued use of Stashly after changes take effect constitutes acceptance of the updated policy.

Questions about this policy? Reach us at privacy@stashly.pro.