Privacy policy

stuff stores the boards you make and the products and clips you put on them. It does not sell your data, does not run ads, and does not track what you browse. The extension can only see a page at the moment you press its shortcut, and it sends nothing anywhere until you confirm a clip.

• Your account. When you sign in with Google we receive your email address, name and Google account id, and store them to identify your account. We never receive your password.
• Your username and boards. The name you claim, your board names, and everything you add to a board: images, titles, notes, links, discount codes, tags, and sticker positions.
• Extension pairings. A random token per connected browser. Only its SHA-256 hash is stored, so the token itself can’t be read back out of the database.
• Basic usage analytics (PostHog): page views and product events such as opening a board, saving a clip, or asking an agent to read one. Visitors are anonymous. Signed-in creators are identified by their account id, and their profile there carries the email address, name and username above, so we can tell a creator’s own activity from their audience’s and answer a support question from the person who sent it. A saved clip records the site it came from (the domain, never the full address). Analytics never carries what you wrote — no note text, no titles, no search queries.

Boards are public. Anything you put on a board — images, titles, notes, links — is visible to anyone who visits /your-username. Don’t clip anything you wouldn’t publish.

• Only when you invoke it. The extension uses Chrome’s activeTab permission rather than blanket access to every site, so it can read a page only in the moment you press ⌥S or click its icon. It has no standing script on the pages you browse and keeps no history of them.
• When you save a clip it uploads the region you selected (a cropped screenshot of the visible tab), the URL of the page it came from, and the title, link, note and tags shown in the card — to your board on this site, and nowhere else.
• Stored in the browser: your pairing token, your board’s address, and a cached copy of your board and tag lists. Cancelling a clip, or closing the overlay with Esc, sends nothing.

To run the service: to show your board at your username, to let only you edit it, to save clips to the right board, and to understand which features get used. That’s the whole list. We do not use your data for advertising, do not sell or rent it, and do not transfer it to third parties except the infrastructure providers below.

• Vercel — hosting; serves the site and keeps short-lived request logs.
• Neon — the Postgres database holding accounts, boards and product metadata.
• Vercel Blob — image storage for product photos and clips.
• Google — sign-in only; we receive your profile, they don’t receive your board activity.
• PostHog — product analytics, as described above.

These providers process data on our behalf and are hosted in the United States. We keep your data for as long as your account exists.

• Delete any product, clip or board from your own board at any time. Deleting an item deletes its stored image too.
• Revoke every connected browser with Disconnect all on the extension page, or uninstall the extension — that erases everything it kept locally.
• Email sharnam@cherryapp.in to get a copy of your data or to have your account and everything on it deleted. We’ll action deletion requests within 30 days.

stuff isn’t directed at children under 13, and we don’t knowingly collect their data.

If this policy changes materially we’ll update the date at the top and, for anything that affects what we collect, say so on the site.

Questions about any of this: sharnam@cherryapp.in.