Overview
DevStash is a private developer bookmark manager. This policy explains what information we collect, why we use it, where it is stored, and the choices available to you.
Information we collect
- For local accounts, we store your username, optional display name, and a salted one-way password hash. We never store the plaintext password.
- When the owner uses Google Sign-In, we receive their name, email address, profile image, and a Google account identifier through the basic OpenID Connect profile and email scopes.
- We store the bookmarks, descriptions, tags, collections, favorites, and preferences you create in DevStash.
- We may process essential technical information such as session identifiers, request timestamps, and security logs needed to operate and protect the service.
- Guest workspaces use a random session token stored in an HttpOnly cookie. Guest content is not connected to an account unless you choose to sign in.
How we use Google user data
Google account data is used only to authenticate you, create your DevStash account, display your profile, keep your workspace private, and let you return to the same workspace. DevStash does not request or access Gmail, Google Drive, contacts, calendars, or other Google service content.
Sharing and service providers
We do not sell your personal information or use Google user data for advertising. Information may be processed by infrastructure providers used to run DevStash, including the hosting platform, database provider, and Google authentication services. We may also disclose information when required by law or necessary to protect users and the service.
Storage and retention
Account data and saved resources are retained while your account remains active. You may permanently delete your account and its content from Settings. Guest workspaces expire after seven days and can be deleted sooner by ending the guest session. Backups and security records, if any, may remain for a limited period before routine deletion.
Security
We use encrypted HTTPS connections, secure cookies, access controls, and account-level data separation. No internet service can guarantee absolute security, so you should avoid storing passwords, secret keys, access tokens, or other sensitive credentials as bookmarks or notes.
Your choices and rights
- View and manage your saved content inside DevStash.
- Sign out at any time.
- Delete individual resources or permanently delete your account and associated workspace.
- Revoke DevStash access from your Google Account permissions page.
- Contact the support email shown on the DevStash Google OAuth consent screen for privacy or data requests.
Children
DevStash is not directed to children under 13, or the minimum age required in their country, and we do not knowingly collect their personal information.
Changes to this policy
We may update this policy as the service changes. The latest version and effective date will always be published on this page.
Contact
For privacy questions or requests, use the support email published on the DevStash Google OAuth consent screen.