Privacy Policy

Last updated: 6 October 2026

This Privacy Policy explains how STASH (“STASH”, “we”, “us”) collects, uses and protects information when you visit our website, use our wallet software, or submit a form on our website. We aim to collect as little as possible and to be clear about what we do collect.

1. Information we never collect

We never receive your recovery phrase, private keys or wallet password. They are created and encrypted on your own device, and the encrypted copy stays in your browser's storage. Because of this, we cannot recover a wallet, reset a password or move assets on your behalf. We will never ask you for this information.

2. Information we collect

Wallet addresses

To display your NFTs, prices, approvals and activity, the wallet software sends public wallet addresses to our servers. Our servers query public blockchain data providers and return the result. Wallet addresses are public by nature on the blockchain.

Information you submit through forms

If you submit a form on our website (for example, to register for early access to a STASH release), we collect the details you enter: your X username, the wallet address you provide, a link to a public post on X, and the time of your submission. If you arrived through a referral link, we also record the referral code that brought you.

Technical information

When you use our website or services we process technical data needed to operate and protect them: a scrambled (hashed) form of your IP address, your browser's user-agent text, and standard server logs (time, type of request, response code and response time). Wallet addresses are removed from our logs, and query strings are not recorded. We use the hashed IP address and user-agent only to detect duplicate or abusive submissions.

Crash reports

If the software encounters an error, it may send a short report to our error-monitoring provider, Sentry, containing the error message, where in the code it occurred, and the page name. Anything resembling a wallet address, key, token or recovery phrase is removed before sending, and we ask Sentry not to store IP addresses.

3. How we use information

• To provide, maintain and secure the website and the wallet software.
• To review submissions, communicate decisions and run our programs. A person reviews every submission; we do not make automated decisions that have legal or similarly significant effects on you.
• To prevent fraud, duplicate entries and abuse, including counting referrals fairly.
• To diagnose and fix errors and improve performance.
• To comply with legal obligations and to protect our rights.

We do not sell your information, and we do not use it for advertising.

4. Information stored on your device

Your encrypted wallet, account names, settings and a saved copy of your latest NFT list (so the software opens quickly) are stored only in your browser. When you submit a form on our website, your browser also stores a small record of that submission (your X username, wallet address, reference number and referral code) so the page can recognise you, show your status and avoid duplicate entries. If you open a referral link, your browser remembers the code so the referral can be recorded. We do not use advertising cookies or third-party analytics trackers. You can remove all of this at any time by clearing this site's data in your browser.

5. Sharing and service providers

We share information only as needed to operate our services:

• Infrastructure and data providers, such as blockchain data, RPC and marketplace providers (for example Alchemy, dRPC, Etherscan and OpenSea), which receive public wallet addresses to answer requests.
• Error monitoring (Sentry), as described above.
• Hosting, where our website and servers run.
• Authorities or advisers, when required by law or to protect our rights, users or the public.

Links to X, OpenSea and other third-party sites are governed by those sites' own privacy policies. Information you publish on a blockchain or on X is public and outside our control.

6. Retention

We keep form submissions only for as long as needed to run the relevant program, and for a limited period afterwards to handle questions or disputes. Daily backup copies are deleted after 14 days. Server logs are kept for a short period. Cached public data is kept for minutes to speed up the service.

7. Security

We protect information with encryption in transit (HTTPS), restricted access to our servers and data, and regular backups. No system is completely secure, and we cannot guarantee absolute security. Please keep your recovery phrase offline and never share it.

8. Your choices and rights

Depending on where you live, you may have the right to request access to, correction of, or deletion of the personal information we hold about you, and to object to or restrict certain processing. To make a request, contact us using the details below. We may ask you to confirm that you control the X account or wallet address concerned. Information that is public on a blockchain cannot be removed by us.

9. Children

Our services are not directed to anyone under 18, and we do not knowingly collect information from children.

10. International processing

Our providers may process information in countries other than your own. We choose providers that apply appropriate safeguards.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it last changed. Significant changes will be highlighted on our website.

12. Contact

For privacy questions or requests, message @STASHAPES on X.