Privacy policy
What Webstash stores
When you save something, the extension sends your library the address and title of the page you are on, the image, GIF or video you chose — or its address, if the file cannot be fetched from your browser — a screenshot of the visible part of the tab, and the stack you picked. That happens only when you ask it to save. The screenshot is the preview for a page that publishes no image of its own.
A streamed video has no file address on the page. So that one can still be saved, a small script notes which video streams each page loads. That list never leaves the page and is gone when you close it.
Your account
Signing in uses your email address, or the email address and name of the Google account you choose. Nothing else is read from Google. The extension keeps a sign-in token in the browser's extension storage on that computer only; it is never synced to a Google or Firefox account and does not contain your password.
Where it lives
Saves are rows in a Postgres database hosted by Supabase in Ireland and files in Cloudflare R2 under EU jurisdiction. The web app runs on Vercel in Dublin. Nothing is shared with anyone else, there is no analytics or tracking in the app or the extension, and the extension reads nothing from pages you do not save.
Screen recordings shared by link
A recording uploaded from QuickCap is stored with its first frame as a preview, and anyone who has its link can watch it without an account. It never appears in your library. Fourteen days after the upload the link stops working and the recording is deleted; you can delete it sooner from QuickCap.
Why the extension asks to read every site
The file you save has to be fetched from the site you are on, with that site's own cookies — most hosts refuse the same file to a server. That is the only use of the permission.
Deleting
A trashed save is kept for 14 days and then deleted with its files; Delete forever removes it at once. To delete your account and everything in it, write to rushkacsgo@gmail.com.