Privacy
StashLog is a journal for the weed you buy and use. This page says, plainly, what that journal stores, who can see it, and how to take it with you or delete it.
What we store
- Your log — jars, ratings, notes, terpene sheets, prices, the stores you bought from.
- Photos you add to jars, sessions and stories.
- Sessions — what you had, when, with whom you tagged, and your rigs.
- Messages — your DMs and group chats, and your Stashy conversations.
- Store follows — the dispensaries you follow, so we can watch their menus for you.
- Your account — your email address, display name and avatar.
- App events — which screens are opened and crash reports, kept in our own database to fix bugs. No ad trackers, no data brokers, nothing sold.
Where it lives
In our Supabase database and storage in the United States. The app is served by Vercel. Photos are stored as files; everything else is rows in a database only StashLog's servers can write to on your behalf.
Who sees what
- Strangers see nothing. Every jar, session and rig has a visibility: Only me, Friends or Public. New accounts default to Friends, and a friend is someone you accepted. You can change the default, or any single item, in Settings → Privacy.
- Public means any signed-in StashLog user can see that item. Nothing is published to the open web.
- Streetside jars (no lab data, no licensed store) are never public: only you and friends of yours who have Pro can see them.
- Stories are friends-only and disappear after 24 hours.
- Messages are seen by the people in the conversation.
- Tags: you choose who may tag you in a session, in Settings → Who can tag me.
The AI
Stashy and the label reader run on Claude, made by Anthropic. When you ask Stashy a question, your journal is sent with it so the answer is about your jars. When you scan a label, link or QR code, that image, link or page is sent to be read. Anthropic processes it to answer and does not use it to train its models. We don't either. Menu pages are fetched from the dispensary's public site; nothing about you goes with that request.
Notifications
If you turn on push notifications, your device's push address is stored so we can send them. Turn them off per kind in Settings, or all at once in your phone's settings.
Brand logos
Jars show the brand's logo to name the brand, the way a store shelf would. We don't claim any affiliation. A brand that wants its logo removed can ask through Contact below, and it comes down.
Export and deletion
Settings → Your data gives you a full takeout (everything, as JSON) or your jars as a CSV, any time. Settings → Danger zone deletes your account and everything in it — jars, sessions, photos, stories and connections. Deletion is immediate and can't be undone; copies in our database backups roll off on the backup schedule and are never restored into the app.
Age and where you live
StashLog is for adults 21 and over, in places where cannabis is legal for them. We ask once when you first sign in. If we learn an account belongs to someone under 21, we delete it.
Changes
If this page changes in a way that matters, the date at the top moves and the app tells you.
Contact
Questions, or anything here you want done: support@stashlog.com. It goes straight to the person who runs StashLog.