YOUR JOURNAL, EXPLAINED

Privacy & data.

This notice describes how the StashTrax pilot handles information. Updated October 30, 2026.

What is saved

Email sign-in verifies your email address using a one-time code sent through Resend. StashTrax stores your account identifier, email, and a display name when available. A secure session cookie keeps you signed in for up to 30 days; signing out revokes that session. Short-lived verification records and request counts help prevent abuse. Existing users retain the identifiers linked to their journals when moving from the earlier sign-in method. StashTrax stores your membership and the products, ratings, effects, notes, photos, receipts, vendors, and Happy Finds you choose to save.

Who can see it

Other users cannot open your journal. The regular admin dashboard shows membership details and usage statistics; it does not display your journal entries or photos. StashTrax is a hosted service, so its operator and service providers process and store data to run and support it. It is not an end-to-end encrypted vault.

Photos and AI scans

StashTrax uses OpenAI and Cloudflare hosting services. When you ask it to read a label, screenshot, or receipt, the image is sent to OpenAI for extraction. A QR lookup may retrieve the linked page directly or through Jina AI or OpenAI. Check results before saving. Manual entry is available.

Avoid including unrelated personal information or payment details in photos. Extracted receipt fields exclude payment and account numbers, but an uploaded image can still contain them.

Usage and sponsored content

The app records signed-in visits, features opened, and approximate active time. Admin charts and heat maps group this activity by feature and day. They do not record your mouse movements, keystrokes, or journal content. If sponsored content is shown, impressions and clicks are recorded. External links open websites with their own privacy practices.

Feedback and support

Feedback & help lets you submit issues and suggestions, see status changes, and receive replies in My feedback. The owner and support managers can read your submission, account email, and conversation. Other users and analytics-only staff cannot read it. Staff may keep private progress notes.

When email notifications are enabled, Resend processes feedback emails for the support inbox and your sign-in email. Only the feedback conversation is included, not your journal records or private staff notes. You can delete your feedback thread; emails already sent cannot be recalled. Avoid sending unrelated personal or health details in feedback.

Editing and deleting

You can edit saved records and delete products, photos, hauls, receipts, vendors, and Happy Finds. Deleting a haul also deletes its linked products. If a stored file cannot be removed immediately, cleanup is queued to retry. Removing or pausing membership does not automatically erase journal records.

Questions during the pilot

Use Feedback & help for account or privacy support, or email info@stashtrax.com. You can submit a signup issue after signing in even if pilot access is not active. A self-service whole-account deletion and data export flow is not available yet.