Stashr

Privacy

This notice explains how Manx Digital handles personal data when you use Stashr.
Last updated: 10 July 2026

Who We Are

Stashr is operated by Manx Digital, 8 Kirby Hill, Douglas, Isle of Man, IM2 1PA. For privacy questions or requests, email support@stashr.dev.

What We Collect

  • Account details, such as name, email address, authentication identifiers, organization name, workspace slug, and profile settings.
  • Workspace records, such as projects, folders, asset metadata, tags, file names, public paths, delivery URLs, API key metadata, usage totals, billing state, and audit events.
  • Operational data, such as request logs, device/browser details, IP address, timestamps, error logs, security events, and support correspondence.
  • Payment and subscription state from Stripe, such as customer identifiers, subscription status, checkout status, billing interval, and purchased delivery bundle records. Stashr does not store full card numbers.
  • Uploaded files and asset metadata that you choose to store in the service.

How We Use Data

  • To create accounts, authenticate users, and keep workspaces secure.
  • To store, organize, optimize, and deliver assets.
  • To enforce plan limits, prepaid delivery credits, storage quotas, media restrictions, and API access.
  • To process subscriptions, delivery bundle purchases, invoices, taxes, refunds, and billing support.
  • To monitor reliability, investigate errors, prevent misuse, and protect the platform.
  • To respond to support, legal, privacy, and account requests.
  • To send service messages such as login, verification, billing, security, and operational notices.

Legal Bases

We process personal data where it is needed to provide the service, where it is necessary for legitimate operational and security interests, where it is required by law, or where you have given consent for a specific use.

Providers

Stashr uses specialist providers to run the service: ManxAuth for sign-in, ManxMedia for file storage, optimization, and delivery, ManxMail for email, Stripe for payments and billing, and database and hosting providers for application records and infrastructure.

Public Delivery URLs

Asset delivery URLs are unlisted but public. Anyone with a public delivery URL can fetch that asset while the asset exists and the workspace has available delivery entitlement. Avoid uploading or sharing files you do not want publicly accessible.

Browser Storage

Stashr uses browser local storage to keep the current sign-in token available to the app. You can clear this by signing out or clearing site data in your browser.

Sharing

We share data with providers only as needed to operate Stashr, comply with law, process payments, handle support, protect rights and security, or complete a business transfer such as a merger or sale.

International Processing

Stashr and its providers may process data in the Isle of Man, the United Kingdom, the European Economic Area, the United States, and other locations where our providers operate. Where required, we use appropriate safeguards for international transfers.

Retention

We keep account, workspace, asset, billing, and operational records for as long as needed to provide Stashr, meet legal and accounting duties, resolve disputes, enforce agreements, and protect the service. Deleted assets and account records may remain in backups for a limited period before expiry.

Your Rights

Depending on your location and the data involved, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. You can make a request by emailing support@stashr.dev.

Complaints

If you are not satisfied with our response to a privacy request, you may contact the Isle of Man Information Commissioner.

Security

We use access controls, scoped API keys, provider-side protections, logging, and operational safeguards. No internet service can be guaranteed secure, so keep account credentials and API keys private.

Children

Stashr is intended for business and professional use. It is not directed to children.

Changes

We may update this notice as the service, providers, or legal requirements change. The latest version will be posted on this page.