stashr.wtf
Last Updated: March 9, 2026
Your Privacy Matters: Stashr is built with privacy at its core. We collect only what's necessary to provide our service and never sell your data.
When you use Stashr without an account, we collect only the minimal information necessary to operate the service:
We never link your IP address to your uploads or build any kind of profile. No identity, no tracking.
If you choose to create an account, we additionally store:
Stashr is built with privacy as a core principle. We want to be transparent: creating an account does require storing some personal information. However, account creation is entirely optional, it exists solely for users who want the convenience of a personal dashboard to manage their uploads, and who are comfortable providing limited data in return for that functionality. If privacy is your priority, we recommend using Stashr without an account. When you do, we know nothing about you, no identity, no email, no history.
When a file is reported through our report system, we collect the reporter's reason for reporting and optional contact information if provided. This data is used solely to investigate the reported content and take appropriate action. Report data is retained for as long as necessary to resolve the report and maintain records for legal compliance.
Stashr offers optional client-side encryption for your files. When you enable this feature:
Zero-Knowledge Encryption: When you use client-side encryption, we have zero knowledge of your file contents. Even if compelled by legal process, we can only provide encrypted data that is unusable without your password.
Your data serves three primary purposes within Stashr. First and foremost, we use it to operate the service itself—storing and delivering your files securely, enforcing the access controls you set, managing automatic file expiration, and generating secure sharing links. Every piece of data we collect directly supports these core functions.
Security and abuse prevention form our second priority. We actively monitor for malicious uploads, spam, and automated abuse attempts. When users report problematic content, we investigate and take appropriate action. This continuous monitoring helps maintain Stashr as a safe platform for legitimate file sharing while preventing misuse.
Finally, we analyze aggregated usage patterns to improve service performance and reliability. This helps us identify technical issues, optimize file transfer speeds, and develop new features that benefit all users. All analytics are conducted on anonymized, aggregated data to protect individual privacy.
We process your personal data on the following legal grounds:
Your files are stored on secure cloud infrastructure distributed across multiple data centers worldwide. We employ TLS/SSL encryption for all data transfers between your device and our servers, ensuring your files remain protected during upload and download. For files you choose to password-protect, we apply additional server-side protection. For files with client-side encryption enabled, the file content is encrypted before it ever reaches our servers.
Data retention follows your chosen settings:
We Do NOT Sell Your Data: Your information is never sold, rented, or traded to third parties for marketing purposes. This is a fundamental principle that will never change.
Information sharing at Stashr is limited to specific, legally necessary circumstances. We may disclose information when required by law, court order, or legal process. Valid requests from law enforcement agencies are carefully reviewed and fulfilled only to the extent legally required. In cases involving child exploitation material, we immediately report to NCMEC and appropriate authorities as mandated by law.
We work with trusted service providers who help operate Stashr's infrastructure, including hosting and content delivery network services. These partners are bound by strict confidentiality agreements and process data solely to provide their designated services. In emergency situations involving imminent harm or ongoing illegal activity, we may share necessary information with authorities to prevent such harm.
Important note on encrypted files: For files uploaded with client-side encryption, we can only provide the encrypted data in response to legal requests. Without your encryption password (which we never have), this data cannot be decrypted.
You maintain complete control over your files throughout their lifecycle on Stashr. At any time, you can delete files you've uploaded, download them before expiration, or update their metadata and settings. When configuring uploads, you control critical privacy settings including password protection, client-side encryption, download limits, and expiration timeframes.
If you are located in the European Union or European Economic Area, you are entitled to specific rights under the General Data Protection Regulation (GDPR). You may at any time:
To exercise any of these rights, please contact us using the details provided in Section 13 below. We will respond to valid requests within 30 days.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
To submit a request under the CCPA, please contact us at privacy@stashr.wtf. We will verify your identity before processing your request and respond within 45 days.
Stashr uses cookies and similar technologies sparingly and only for essential purposes:
We do not use third-party tracking cookies or analytics services that track individual users.
Stashr honors Do Not Track (DNT) signals sent by your browser. Since we do not engage in cross-site tracking or serve targeted advertisements, our service operates in a privacy-respecting manner regardless of your DNT setting.
To deliver our service reliably and securely, Stashr relies on carefully selected third-party providers:
Each third-party service operates under its own privacy policy and security standards. We carefully vet all partners to ensure they meet high standards for data protection and security. If Stashr links to external websites, those sites operate independently under their own privacy policies, which we encourage you to review.
Stashr is not designed for or directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will take immediate steps to delete it from our systems.
As a global service, your data may be transferred to and processed in countries different from your own. We ensure appropriate safeguards are in place for international data transfers, maintaining the same high standards of protection regardless of where data is processed.
Stashr does not delete accounts or associated files due to inactivity. Your account and all files linked to it will remain available indefinitely until you choose to delete them yourself. The only exception is files uploaded with a temporary expiration period, which are automatically removed once the configured timeframe has passed.
In the unlikely event of a security breach affecting user data, we have comprehensive response procedures in place. We will promptly investigate the incident, take immediate steps to mitigate any harm, and notify affected users if required by applicable law. We will also report the incident to relevant authorities as legally mandated. Note that files uploaded with client-side encryption remain protected even in a breach scenario, as the encrypted data is unusable without user passwords.
This Privacy Policy may be updated periodically to reflect changes in our practices or legal requirements. When we make changes, we'll update the "Last Updated" date at the top of this page. For material changes, we may provide additional notice through the service. Your continued use of Stashr after policy updates constitutes acceptance of the revised terms.
The data controller responsible for your personal data is:
Stashr
Based in the Netherlands
Contact: privacy@stashr.wtf
As the data controller, Stashr determines the purposes and means of processing your personal data as described in this Privacy Policy. For questions regarding data processing or to exercise your rights under applicable privacy laws, please use the contact details above or visit our contact page.
We welcome questions and concerns about this Privacy Policy or our data protection practices. You can reach us through: