PromptStash

1. Introduction

Welcome to PromptStash - AI Prompt Manager ("Extension", "we", "our", or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Chrome browser extension.

We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns, please contact us at the information provided below.

By installing and using the Extension, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information We DO NOT Collect

PromptStash does NOT collect any personal data.

Data Type	Collected?
Personal identifiers (name, email, phone, address)	NO
Authentication information (passwords, credentials)	NO
Financial information (credit card, bank details)	NO
Location data (GPS, IP-based location)	NO
Browsing history	NO
Search queries	NO
User activity on websites	NO
Cookies or tracking identifiers	NO
Device identifiers	LIMITED — a random install ID is generated locally to bind your Pro license to your device. It is not linked to your identity.
Analytics or usage statistics	NO
AI prompts sent to external servers	NO — your prompts never leave your device
License key sent to verification server	YES — only during Pro activation/deactivation, sent to our Cloudflare-hosted license server to validate your Gumroad purchase

2.2 Information Stored on Your Device

The Extension stores data using Chrome's built-in Storage APIs. Depending on the data type, storage is either local-only (never leaves your device) or sync (backed up via your Google account, if Chrome Sync is enabled):

Data	Purpose	Storage Location
Saved prompts (title, body, category, tags)	To store your AI prompts	Chrome Local Storage — never leaves device
Theme preference (light/dark)	To remember your theme choice	Chrome Local Storage — never leaves device
Pro license state (license key, activation token, device ID)	To persist your Pro activation across browser restarts	Chrome Sync Storage — synced to your Google account if Chrome Sync is on. We cannot access this data.

• Your saved prompts never leave your device — they are stored in Local Storage only
• Pro license data is stored in Sync Storage solely for your convenience (survives reinstalls). We have zero access to it.
• This data is not accessible to us or any third party beyond Google's standard sync infrastructure
• All locally stored data is automatically deleted when you uninstall the extension

3. How We Use Information

Since we do not collect personal information, we do not use your personal information for any purpose.

The locally stored data is used solely to:

• Display your saved prompts in the extension
• Apply your preferred theme (light/dark mode)
• Organize prompts by categories and tags

4. Chrome Extension Permissions

4.1 "storage" Permission

Purpose	Justification
Save prompts locally	To store your AI prompts, categories, tags, and theme preference on your device

What we DON'T do with this permission:

• We do NOT sync your prompts or personal data to any server we own or operate
• Pro license state syncs via Chrome Sync (Google) only — we have no access to it
• We do NOT share stored data with anyone
• We do NOT access data from other extensions
• We do NOT transmit your prompts over the network

PromptStash requests the absolute minimum permissions needed to function:

• storage — saves your prompts and settings locally on your device
• contextMenus — adds a right-click “Save to PromptStash” option for selected text; text is stored locally and never transmitted
• scripting + content_scripts (<all_urls>) — pre-injects a lightweight toast notification script at page load time so “Save to PromptStash” can show an in-page confirmation; the script only listens for messages from the extension itself and never reads, records, or transmits any page content
• alarms — schedules periodic backup reminders; no network activity
• host_permissions (license server only) — Pro license validation requests go to promptstash.krishhmaaya-innovations.workers.dev only; your prompts are never involved

We do NOT request access to your full browsing history or arbitrary websites beyond our own license server.

5. Third-Party Services

Free users: PromptStash does NOT integrate with any third-party services and works entirely offline. We use none of the following:

• No analytics services (Google Analytics, Mixpanel, etc.)
• No error tracking services (Sentry, Rollbar, etc.)
• No advertising networks
• No social media integrations
• No AI services (your prompts stay local)

Pro users interact with two third-party services for license management only:

• Gumroad — payment processor for Pro license purchases. We verify your license key against Gumroad’s API. Gumroad’s privacy policy applies to the purchase transaction.
• Cloudflare Workers — hosts our license validation API. Only the license key and a random device ID are transmitted. Your prompts are never involved.

No third-party service ever receives your prompts, usage data, or personal information.

6. Data Sharing and Disclosure

We DO NOT:

• Sell your data to anyone
• Share your data with advertisers
• Share your data with analytics companies
• Share your data with data brokers
• Share your data with any third parties
• Use your data for marketing purposes
• Use your data for profiling
• Use your data for AI training

We may disclose information if required by law (subpoena, court order) or necessary to protect our legal rights. However, since we don't collect any data, we have nothing to disclose.

7. Data Security

7.1 Local Storage Security

All data is stored using Chrome's built-in Storage API which provides encryption at rest, isolation from other extensions, isolation from websites, and automatic cleanup on uninstall.

7.2 Code Security

• No remote code execution
• No eval() or dynamic code
• Content Security Policy enforced
• Manifest V3 compliant (latest security standards)

7.3 Network Security

Free users: PromptStash makes zero network requests. The extension works completely offline — no servers, no telemetry, no tracking.

Pro users: The only network requests are to our Cloudflare-hosted license server (promptstash.krishhmaaya-innovations.workers.dev) during activation, deactivation, and once-daily background validation. Your prompts never leave your device — only the license key is transmitted.

8. Data Retention

Data Type	Retention Period
Saved prompts	Until you delete them or uninstall
Theme preference	Until you uninstall

All data is automatically deleted when you uninstall the extension.

9. Your Rights and Choices

9.1 Access Your Data

You can view stored data by right-clicking the extension icon → "Inspect popup" → Application → Local Storage.

9.2 Delete Your Data

• Delete individual prompts: Click the delete button on any prompt card
• Clear all data: Uninstall the extension (all data is automatically deleted)
• Clear via Chrome: Chrome Settings → Privacy → Clear browsing data → Extension storage

10. Children's Privacy

Our Extension does not target children under 13, knowingly collect information from children under 13, or contain content inappropriate for children. The Extension is intended for general audiences with no age restriction.

11. International Users

11.1 GDPR Compliance (European Union)

• Legal Basis: Legitimate interest (providing the service you requested)
• Data Controller: KrishhMaaya Innovations
• Data Collected: None (only local storage)
• Your Rights: Access, rectification, erasure, portability
• No Cross-Border Transfer: Data stays on your device

11.2 CCPA Compliance (California)

• Categories of PI Collected: None
• Sale of PI: We do not sell personal information
• Right to Know: We collect no data
• Right to Delete: Uninstall the extension

12. Updates to This Policy

We may update this Privacy Policy from time to time. When we do, the "Last Updated" date will change, significant changes will be noted in extension updates, and continued use constitutes acceptance.

Version	Date	Changes
1.0	February 8, 2026	Initial release

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy:

Developer: KrishhMaaya Innovations

Method	Contact
Email	kminnovations.contact@gmail.com
Website	kminnovations.dev

Response time: We aim to respond within 48 hours.

14. Summary