Privacy policy

What we collect

• Account details — your name, username, email address, password (stored only as a hash), and an optional profile photo.
• Your content — the collections, items, custom fields, images, spaces, and loan records you create.
• Technical data — the requests your browser or the app makes, kept briefly in server logs to run and secure the service.

How we use it

To run StashSpace: to sign you in, store and show your records, share collections with the people you choose, and send the few transactional emails the service needs (invitations and password resets). We do not sell your data, and we do not use it for advertising.

Where your data lives

We use a small number of providers to operate the service. They process data only on our behalf:

• Hosting — the application and database run on Hetzner (Germany).
• Image storage — uploaded images are stored on Cloudflare R2.
• Email — transactional email is sent through Brevo.
• Catalog lookups — when you look up a book or other item, we query third-party catalogs (such as Google Books and Open Library). Where a lookup uses your own API key, that request goes directly to the provider you configured.

Cookies

We set a single session cookie to keep you signed in. We do not use advertising or third-party tracking cookies.

What is shared

Your collections are private to you until you share them. Adding a collection to a space makes it visible to that space's members; your profile page is visible to people you share with. Nothing is published publicly without your action.

Your choices

• View and change your account details on your settings page.
• Delete your collections and items at any time.
• Ask us to export or delete your account and its data — email [email protected].

Retention

We keep your data while your account is active. When you delete your account, we remove your records; backups and server logs age out on their own schedule.

Children

StashSpace is not directed at children, and we do not knowingly collect data from children under 13.

Changes

If this policy changes, we will update the date above. Material changes will be noted in the app.

Contact

StashSpace is operated from the United States. For any question about privacy, or to request access to or deletion of your data, email [email protected].