Privacy Policy

1.What this covers

This policy covers stashalog.com and the Stashalog app, including the stashes, the listening and fishing logs, and Paxton’s Yard.

2.What is collected

• Your account. An email address and a password. The password is never stored in a readable form. Authentication is handled by Supabase Auth, which stores a one-way hash.
• What you put in your stashes. Records, books, shows, filament, lures, custom stashes, and anything attached to them: titles, notes, ranks, dates, and the fields you define yourself.
• Activity you record. Plays you mark, fishing log entries, and print usage: each with the date it happened.
• Paxton’s Yard state. Your chip balance, achievements, sound and display preferences, and, if you play a multiplayer table, which room you joined and the hands played there.
• Standard server logs. The hosting provider records requests, including IP address, for security and reliability. These are not linked to your collection and are not used to build a profile.

There is no tracking pixel, no advertising identifier, no fingerprinting, and no third-party analytics of any kind. Nothing on these pages calls out to an external service: the typeface is served from this site rather than from a font host, and the sounds in Paxton’s Yard are generated in your browser rather than downloaded.

3.Why it is collected

To run the service and for nothing else: to sign you in, to show you your own collection, to keep a game going, and to keep the whole thing working. Your data is not sold, rented, shared with advertisers, or used to train anything.

4.Cookies

Only the cookies needed to keep you signed in. They are strictly necessary, they hold a session token and nothing else, and they are not used to track you between sites. There are no advertising or analytics cookies, which is why this site has no cookie banner.

5.Who else can see it

Two service providers, both acting only as hosts:

• Supabase, the database and authentication. Your rows are isolated at the database level by row-level security, so one account cannot read another’s.
• Vercel, hosting and delivery of the site itself.

Beyond those, your data is disclosed only if the law requires it. If features that use an outside service are added later (image recognition for importing a collection from photos is the one being considered), this page will say so before they ship, and they will be optional.

6.How long it is kept

Your collection and account are kept until you delete them. Two things have their own clocks: multiplayer rooms are swept three days after their last activity, and changes to your chip balance and achievements are written to a rolling audit trail kept for about 30 days. That safety net exists because it has already been needed to restore a balance lost to a sign-in fault.

7.Deleting your account

You can delete your account yourself from your account page. It removes the account and everything attached to it: every stash and every item in it, your logs, your chips, your achievements, your preferences, and the audit trail above. It happens immediately and it cannot be undone. There are no backups to restore from, so please export or copy anything you want to keep first.

If you want a copy of your data or you can no longer sign in to delete it yourself, email support@stashalog.com.

8.Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to its processing. Access and correction are built into the app, since the collection screens are the data, and deletion is the button described above. For anything else, use the address at the end of this page.

9.Children

Stashalog is not directed at children. Paxton’s Yard contains simulated gambling: card and casino games played with virtual chips that have no cash value and cannot be bought or cashed out. It is intended for adults. Accounts should not be created by anyone under 13, or under the minimum age of digital consent where they live if that is higher. If you believe a child has created an account, write to the address below and it will be removed.

10.Security, honestly stated

Access to your rows is enforced by the database itself rather than by the app, which is the strongest place to enforce it. Passwords are hashed by the authentication provider and are never visible to this site. That said, no service can promise perfect security, and this one is run by a small operation, so please do not store anything in it that would be damaging to lose or to have exposed.

11.Changes

If this policy changes in a way that affects what is collected or who sees it, the date at the top will change and the change will be described here.

12.Contact

Questions about this policy, or about your data: support@stashalog.com. This service is operated from the State of Colorado, United States.

See also the Terms of Service.