Privacy Policy
Your privacy is fundamental to stash.chat. Learn how we protect your data and respect your privacy.
Last Updated: October 23, 2025
Effective Date: October 22, 2024
Our Privacy Philosophy
At stash.chat, privacy isn't just a feature—it's the foundation of everything we do. We believe that private communication is a fundamental right, and we've designed our platform to minimize data collection while maximizing user privacy and security.
Information We Collect
✅ Minimal Data Collection
We collect only the absolute minimum data necessary to provide our service:
- Account Data (Optional): Username, email, and password hash (if you create an account)
- Session Data: Temporary session tokens for authentication
- Technical Data: IP addresses (temporarily), browser type, and basic usage statistics
- Abuse Prevention: Reports and moderation data for safety
❌ What We DON'T Collect
We explicitly do NOT collect:
- Message content (messages are encrypted and ephemeral)
- Video content (videos are one-time view only)
- Personal conversations or private communications
- Behavioral tracking or user profiling data
- Location data or device identifiers
- Third-party tracking cookies or analytics
- Social media connections or contacts
- Biometric data or personal identifiers
How We Use Your Information
Service Provision
- Deliver ephemeral messages and videos
- Provide secure, encrypted communications
- Enable room creation and management
- Support live video connections
Safety & Security
- Prevent abuse and harmful content
- Investigate reports and violations
- Block known bad actors
- Maintain platform integrity
Technical Operations
- Ensure service reliability
- Debug technical issues
- Optimize performance
- Maintain security infrastructure
Data Protection & Security
Technical Safeguards
Encryption
- End-to-end encryption for 1:1 conversations
- AES-256 encryption for data at rest
- TLS 1.3 for data in transit
- Secure key exchange protocols
Access Controls
- Role-based access to user data
- Multi-factor authentication for staff
- Regular access audits
- Principle of least privilege
Ephemeral by Design
Our platform is built around the principle of ephemerality:
- Messages: Automatically deleted after viewing or expiration
- Videos: One-time view only, then permanently deleted
- Live Chats: Not recorded or stored
- Room Data: Minimal retention for functionality only
Data Sharing & Third Parties
Your Privacy Rights
Access & Portability
You have the right to:
- Access your personal data
- Export your account information
- Receive a copy of your data
- Understand how we use your data
Control & Deletion
You can:
- Delete your account at any time
- Request data deletion
- Opt out of optional features
- Control your privacy settings
Correction & Objection
You have the right to:
- Correct inaccurate data
- Object to data processing
- Restrict data processing
- Withdraw consent
Data Retention
Retention Schedule
International Data Transfers
Global Privacy Compliance
We comply with international privacy laws including:
- GDPR (EU): Full compliance with European data protection regulations
- CCPA (California): California Consumer Privacy Act compliance
- PIPEDA (Canada): Canadian privacy law compliance
- LGPD (Brazil): Brazilian data protection law compliance
We use appropriate safeguards for international data transfers, including standard contractual clauses and adequacy decisions.
Children's Privacy
COPPA Compliance
stash.chat is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information immediately.
Parents and guardians should monitor their children's online activities and teach them about safe internet practices.
Changes to This Policy
Policy Updates
We may update this Privacy Policy from time to time. When we do:
- We'll post the updated policy on this page
- We'll update the "Last Updated" date
- For significant changes, we'll notify users via email or in-app notification
- Continued use of our service constitutes acceptance of the updated policy
Contact Us
Privacy Questions
Email: privacy@stash.chat
Response Time: Within 48 hours
For questions about this privacy policy or your privacy rights.
Data Protection Officer
Email: dpo@stash.chat
Response Time: Within 72 hours
For formal privacy complaints and data protection inquiries.