1. Overview
StashKit is built with a privacy-first philosophy. Most tools operate entirely on your device, in your browser. This Policy explains what we collect, what we do not collect, how we use any information we have, and the choices available to you.
This Policy is for transparency and does not create contractual or legal rights beyond applicable law.
2. Scope & Definitions
This Policy applies to the StashKit website and the tools we host (collectively, the “Services”). “Personal Data” means any information that identifies or can reasonably be linked to an individual.
3. Our Privacy Principles
- Minimize: Collect as little data as possible.
- Local-first: Run tools client-side where feasible.
- Transparent: Be clear about what we do.
- Control: Give you choices and easy opt-outs.
4. Information We Collect
We strive to limit collection to what is necessary to operate and improve the Services:
- Basic service metadata (e.g., general request/response timing, error codes) to keep the site reliable.
- Non-identifying technical data such as browser type/version, device type, and approximate region derived from IP (on the server’s side) for abuse prevention and capacity planning. We do not build user profiles.
If we ever introduce optional accounts or newsletters, we will clearly explain additional data uses at the point of collection.
5. What We Do Not Collect
We do not collect the content you process with our client-side tools (e.g., pasted text, images, or files you transform). That content remains on your device unless you explicitly export or share it.
- No keystroke logging.
- No copy of hashes, encodes, or transformations you make.
- No sale of Personal Data.
6. How We Use Information
- Operate, maintain, and secure the Services.
- Diagnose outages and fix bugs.
- Understand aggregated usage patterns (e.g., which pages are popular) to prioritize improvements.
- Comply with legal obligations and enforce Terms.
8. Analytics & Third Parties
If we use privacy-respecting, cookie-less analytics, it will be for aggregate metrics only (e.g., page views, event counts). We do not use behavioral ads or third-party trackers.
Where third-party libraries or CDNs are used, they may receive your IP address to serve assets. Their processing is governed by their own policies.
9. Data Retention
We retain server-side metadata only as long as necessary for operations, security, and legal compliance, then delete or aggregate it. Client-side settings persist on your device until you clear them.
10. Security
We use reasonable technical and organizational measures to protect the Services. However, no method of transmission or storage is 100% secure. For sensitive tasks, use a trusted device and network, and avoid untrusted browser extensions.
11. International Transfers
If any processing occurs outside your country, we implement safeguards required by applicable law. By using the Services, you understand information may be processed in jurisdictions with different data-protection standards.
12. Your Rights & Choices
Depending on your location, you may have rights to access, correct, delete, or restrict processing of Personal Data, and to object or request portability. Because we minimize collection, we may have little or no Personal Data to fulfill such requests.
To make a request, email privacy@stashkit.dev. We may need to verify your identity before acting.
- Opt-out of analytics: Use a content blocker or Do-Not-Track. We honor reasonable, privacy-preserving signals where feasible.
- Clear local data: Remove Local Storage and cookies via your browser.
13. Children's Privacy
The Services are not directed to children under the age of 13 (or the age of digital consent in your jurisdiction). We do not knowingly collect Personal Data from children. If you believe a child has provided Personal Data, contact us to delete it.
14. Changes to this Policy
We may update this Policy from time to time. Material changes will be posted here with an updated “Last updated” date. Your continued use of the Services after changes take effect signifies acceptance of the revised Policy.
15. Contact
StashKit is owned and operated by Kos. Questions or requests regarding this Policy can be sent to privacy@stashkit.dev.