Privacy Policy

Who we are

Stash is a read-it-later and bookmarking service operated by Fuel Mist (“we”, “us”, “our”). The hosted version of Stash is available at stash.fuelmist.com. Stash is also available as open-source software that you can self-host on your own infrastructure.

Contact: [email protected]

What data we collect

Account information: your username and, optionally, your email address. Email is only required if you want to use password reset.
Saved content: the URLs, titles, article text, and images of pages you save. Notes and tags you add to items.
Usage data: the date and time you last used the service, stored solely to show activity statistics in the admin panel.
Session tokens: a signed JWT stored in a cookie to keep you signed in. No persistent tracking cookies are used.

We do not collect device identifiers, advertising IDs, or precise location data. We do not use third-party analytics or advertising SDKs.

How we use your data

To provide and operate the Stash service.
To send password-reset emails when you request them.
To generate AI summaries of saved articles using the Anthropic API (Claude). Article text is sent to Anthropic solely for this purpose. Anthropic's privacy policy applies to data processed by their models.
To display aggregate usage statistics to administrators of the instance.

Service limits and fair use

To protect platform reliability and prevent abuse, the hosted service currently applies a fair-use limit of 150 new saved items per account per calendar month. This limit may change as the service evolves.

Content extraction limitations

Stash attempts to extract readable content from URLs that you save. Some sites do not permit extraction, analysis, or summarisation due to paywalls, anti-bot controls, robots restrictions, dynamic page rendering, legal constraints, or technical limitations. In these cases Stash may only store the URL and minimal metadata. This is outside our direct control.

Third-party services

Anthropic

Article content is sent to the Anthropic API to generate summaries. Data is processed under Anthropic's terms of service and privacy policy. Summaries are not used to train Anthropic's models under the current API terms.

Resend

Your email address is shared with Resend solely to deliver password-reset emails you have requested. Resend's privacy policy governs their handling of this data.

Data storage and security

On the hosted service at stash.fuelmist.com, your data is stored in a PostgreSQL database on a private server. Passwords are hashed using bcrypt and are never stored in plain text. Data is transmitted over HTTPS. We do not sell your data to third parties.

If you use a self-hosted instance of Stash, data storage and security are the responsibility of whoever operates that instance.

Data retention

Your data is retained for as long as your account exists. When you delete your account, your personal data and saved items are permanently removed from our systems. Deletion can be initiated from the Profile screen in the app or web interface.

Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to access, correct, or delete the personal data we hold about you. You can update your username, email address, and password directly in the app. To request a copy of your data or to exercise any other rights, email us at [email protected].

Children

Stash is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has registered an account, please contact us and we will delete it promptly.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page will reflect any changes. Continued use of Stash after changes are posted constitutes acceptance of the revised policy.

Contact

Questions or concerns about this policy? Email [email protected].