Privacy Policy

Most export formats are generated in your browser. PDF export uses temporary server processing to create the file you request. Stashkin does not keep a permanent archive of your conversations or use their content for advertising or AI model training. The sections below explain each export path and the separate account, payment and usage information we handle.

1. Information Stashkin handles

The extension accesses the ChatGPT conversation you choose to export, including messages, code, tables, formulas, images, references and links. It reads the open ChatGPT page and calls ChatGPT's conversation endpoints using your existing ChatGPT session. Your ChatGPT credentials and session tokens stay in your browser and are never sent to Stashkin.

A Stashkin account is optional for the Free plan. If you create one, Stashkin stores your name, email address, account identifier and email-verification status. Google Sign-In also supplies your Google account identifier and may supply authentication tokens, which Stashkin stores in encrypted form. If you sign in by email, Stashkin stores a password hash, not your password. Session records may include an IP address and user agent for authentication and security.

If you buy Pro, Stripe processes the payment. Stashkin receives the customer, subscription and transaction information needed to provide Pro access and manage billing. Stashkin does not receive or store your full card number or security code. If you contact support, Stashkin receives your message and any information or attachments you choose to send.

2. Local exports

Word, Markdown, TXT, PNG and JSON exports are generated inside your browser. When you copy an export to the clipboard, your browser creates the copy on your device. The extension may fetch conversation images from the ChatGPT or OpenAI URLs where they are hosted so it can include them in an export. It does not send the conversation or finished file to Stashkin for these formats.

Exported files and clipboard content remain on your device or in the destination you choose until you remove them. Deleting a Stashkin account or uninstalling the extension does not delete files you have already saved. The Markdown-to-Word tool on stashkin.com also creates its file in your browser; the Markdown or file you provide is not uploaded to Stashkin.

3. Server-rendered PDF exports

When you choose PDF, the extension sends the selected conversation to the Stashkin API. The request can include the conversation title, selected messages, code, tables, formulas, references, compressed images, message identifiers and the rendering options you chose. It also includes the formatted conversation date and ChatGPT source URL when those options are enabled.

The API turns the transcript into HTML and sends that HTML to Cloudflare Browser Run for PDF rendering. The generated PDF is streamed back to the extension and saved on your device. Stashkin holds the transcript, HTML and PDF in memory for the request and does not write them to a database or object store. Cloudflare says customer-submitted HTML is discarded after the response; the generated PDF may remain in Cloudflare's default Quick Actions cache for about five seconds.

A PDF request also includes a random installation identifier stored by the extension. If you are signed in, the browser includes your Stashkin session cookies and the API uses your account plan to determine your PDF allowance. The API receives the IP address and user agent that accompany the request. Stashkin stores daily PDF counts keyed by the account identifier, or, while signed out, by the installation identifier and a SHA-256 hash of the IP address. These count records do not contain conversation content, URLs or generated files.

4. Browser permissions and data stored on your device

Stashkin requests access only to supported ChatGPT pages, the image hosts used by those pages and stashkin.com. It uses this access to read the conversation you ask it to export, retrieve the conversation's images, request a PDF and check whether your Stashkin account has Pro access. It does not read your browsing history or the content of unrelated sites.

The extension uses the storage permission to keep your export preferences, a random installation identifier, the number of Word exports created on your device, the last PDF allowance returned by the API, the last known Pro entitlement and random analytics identifiers. The extension stores preferences in the browser's sync storage. They may sync to another device where you use the same signed-in browser profile. The extension uses the offscreen permission to lay out PNG exports on your device. It uses the context menu permission to add the Export conversation menu to ChatGPT. The clipboard permission is used only when you ask Stashkin to copy an export.

Older versions may have stored favorites, notes, bookmarks or prompts in extension storage. The current version does not read or transmit that legacy data. You can clear extension storage or remove the extension through your browser.

5. Usage analytics

The extension sends first-party usage events to the Stashkin API. Events cover installation and updates, whether the popup found a conversation, the export format and scope, which part of the extension started an export, whether the export completed, failed or was blocked by a Free-plan limit, the name of a setting that changed and whether an upgrade link opened. A setting event includes the setting name, never its value.

Extension analytics use random device and session identifiers stored by the extension. When you are signed in, events may also include your random Stashkin account identifier, but not your name or email address. Every analytics event records https://stashkin.com/extension as its URL. The API also receives the IP address and user agent that accompany the request and derives coarse location, browser and device information. Extension analytics never include conversation text, a conversation identifier, the ChatGPT page URL, filenames, exported files or setting values.

The website sends page views, feature interactions and web performance measurements to the same first-party analytics service. Page URLs and referrers exclude fragments and query parameters other than campaign attribution. Events may also include random device and session identifiers, screen and viewport dimensions, time zone, browser information, IP address and coarse location. Account and billing events recorded by the API may use Stashkin's random account identifier, but not your name or email address.

Website analytics are collected by Stashkin's first-party service. Stashkin does not load Google Analytics or use analytics for personalized advertising or advertising profiles.

6. Cookies and operational logs

stashkin.com uses cookies to keep you signed in, protect your account from forged requests and maintain your session. The browser includes those cookies when the extension checks your Pro entitlement or requests a PDF, but the extension does not read or store their values.

The Stashkin API keeps operational logs for reliability, security, abuse prevention and troubleshooting. PDF request logs may include the request size, number of exported turns, account tier, rendering time, outcome and error code. Logs may also include the request time, endpoint, response status, request identifier and technical error details. Stashkin does not put conversation content, source URLs, images or generated files in its server logs.

7. Service providers and disclosures

Stashkin uses the following providers for specific parts of the service:

• Cloudflare hosts the website and API and provides content delivery, security, database, analytics, logging, email routing and Browser Run PDF rendering.
• Google provides Google Sign-In. If browser sync is enabled, your browser provider may also synchronize extension preferences under its own privacy policy.
• Stripe processes payments and provides checkout, subscription and billing-portal services.

Stashkin may disclose information when required by law or when necessary to investigate fraud, abuse or a security threat. Stashkin does not sell extension user data, share it for personalized advertising, use conversation content to train AI models or use the data to make credit or lending decisions.

8. Retention and security

Stashkin does not retain conversation content, conversation images, rendered HTML or generated files after a PDF request ends. Cloudflare Browser Run may cache the generated PDF for about five seconds, as described above. Preferences, the number of Word exports created on your device, entitlement state, the most recent PDF allowance returned by the API, installation identifier and analytics identifiers stay in extension storage until you clear that storage or uninstall the extension.

First-party analytics are retained in Cloudflare Analytics Engine for up to 90 days. Daily PDF usage records are retained for up to 90 days. Account and subscription records are kept for as long as needed to operate your account, manage an active or past subscription and meet legal or accounting obligations. Authentication sessions expire or are removed when you sign out or delete the account. Support messages are kept until the request and necessary follow-up are complete, unless the law requires longer retention. Operational logs remain in Cloudflare Workers Logs for no more than seven days.

Stashkin uses access controls, encryption in transit and encryption for stored Google authentication tokens to protect information. No transmission or storage system can guarantee complete security. If a security incident affects personal information, Stashkin will take appropriate action and provide notice where the law requires it.

9. Your choices and rights

You can use every Free export format without creating a Stashkin account. PDF is the only export format that sends conversation content to Stashkin; choose another format if you do not want server processing. You can manage extension permissions and local data in your browser, delete saved files yourself, or stop future extension processing by disabling or uninstalling Stashkin.

To request access, correction or deletion of personal information held by Stashkin, email support@stashkin.com from the address on your account. Stashkin will verify the request when needed. Account deletion removes your account and Stashkin sessions. Stashkin and Stripe may retain subscription or transaction records when required for legal or accounting purposes. Rights may vary under the law where you live.

10. Chrome Web Store Limited Use

Stashkin's use and transfer of information received through the Chrome extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. Stashkin limits collection, use and transfer to the data needed to export conversations, provide account and plan access, and perform the operational tasks described in this policy.

Stashkin does not use extension user data for personalized advertising, data resale, credit decisions or unrelated research. Human access to extension user data is limited to cases where you authorize human review of specific data, access is necessary for security or legal compliance, or the data has been aggregated and anonymized for permitted internal operations.

11. Children, international processing and policy changes

Stashkin is not directed to children under 13. If Stashkin learns that it collected a child's personal information in violation of applicable law, it will delete the information.

Stashkin and the providers listed above may process information outside your country. Each provider determines its processing locations and safeguards under its privacy terms and applicable data-protection law.

If this policy changes, Stashkin will update the date at the top. Material changes will be announced through the website, extension or another appropriate channel. Questions and privacy requests go to support@stashkin.com.