Privacy Policy

Everything you add to Stash — items, titles, tags, notes and their values — is stored locally on your Mac. Secret values (API keys, tokens and other credentials) are stored in the macOS Keychain, encrypted at rest and protected by the Secure Enclave. Stash never writes secrets to disk in plain text.

Stash works fully offline. Your data is never uploaded to us and we have no servers that hold your content.

No accounts. No sign-up. Stash does not record what you store, the contents of your items, or any personal information, and it contains no third-party advertising or tracking SDKs. The only data we do collect — anonymous, aggregate usage counts — is described in the next section, and you can turn it off.

To understand roughly how many people use Stash and how, the app sends an occasional anonymous ping: once shortly after launch and about once a day while it keeps running. Each ping contains a random installation identifier, the app version, your macOS version, and your Mac's CPU architecture (Apple silicon or Intel).

A ping may also include small, aggregated counts of a few in-app actions since the last ping: how many times you opened Stash, and how many items you added, broken down by item type (secret, URL, command, prompt, snippet or text). These are plain tallies — for example "3 items added, 2 of them secrets." They never include the item itself: no titles, values, tags, or anything you type. If you turn analytics off, nothing is counted or sent.

The installation identifier is a random value generated on your Mac the first time Stash runs. It is not derived from your hardware, your name, or any account. It lets us tell a new install apart from a returning one, and group these anonymous counts, without identifying you or knowing who you are.

These pings go to our own server, running on Cloudflare, and are not shared with any third-party analytics provider. We do not store your IP address alongside this data or use it to build any profile. You can turn analytics off completely in Settings ▸ General ▸ Privacy.

Apart from the anonymous ping described above, the only time Stash reaches the network on its own is to check for application updates. It periodically requests a small, signed update feed from our update host to see whether a newer version is available, and downloads the update if you choose to install it.

This is a standard file request. Like any web request, our hosting provider (Cloudflare) may log technical metadata such as your IP address, timestamp and user agent to deliver the file and protect the service. This information is not linked to you or to your Stash content, and we do not use it to build any profile. You can disable automatic update checks in the app's settings.

When you copy an item, Stash places that value on your Mac's clipboard so you can paste it — the same as any copy action on macOS. This happens only when you ask for it, stays on your device, and is handled by the system.

We do not sell, rent or share your data with anyone, because we don't have it. Your stash never leaves your Mac unless you explicitly export or move it yourself.

Because everything is stored locally, you are always in control. You can edit or delete any item at any time, and removing an item — or deleting the app — removes its data from your Mac, including secrets held in the Keychain.

Stash is a developer tool intended for a general audience and is not directed at children under 13, and we do not knowingly collect any information from them.

If this policy changes, we'll update the date at the top of this page. Material changes will be reflected here before they take effect.

Questions about privacy? Reach out on X (@sneurgaonkar).