Privacy Policy

Last updated: 2026-09-07 · Stow is a local-first Chrome extension. This is the whole policy.

One sentence summary

Stow never uploads your data. Everything stays on your device. The only network request outside payment goes to Creem (creem.io) at checkout.

What we collect: nothing

• No account, no email, no analytics SDK, no telemetry, no ads.
• All saved pages, images, search index, and funnel events live in IndexedDB — a browser storage that belongs to you, on your disk.
• IndexedDB is requested as persisted storage to avoid browser cleanup.

Network activity

• During normal use (Save / Read / Search / Export) Stow makes zero network requests.
• Image localization fetches images via the service worker's fetch with <all_urls> permission — this is a direct fetch from the page's origin to your device for offline archiving, not an upload.
• When you click Unlock, Stow asks our minimal session endpoint (pay.praexos.com) to create a Creem checkout — it receives no personal data, keeps no logs, and only returns a checkout URL. The checkout itself opens in a separate window hosted by Creem (creem.io, operated by Armitage Labs OÜ) for the $29 lifetime purchase (Creem is Merchant of Record and handles global taxes). The extension itself loads zero external scripts.
• No remote code, no eval; the checkout window is a regular browser tab, not an extension page.

Permissions explained

• activeTab + scripting: when you click Save, the page-capture code is injected into that tab — at that moment only. No code runs on any page until you choose to save it.
• <all_urls> (host_permissions): to fetch the article's images directly to your device for offline storage — declared for the service worker fetch; a direct download, not an upload.
• storage + unlimitedStorage: to persist the license cache and funnel locally — and keep your library permanently on your own disk.
• identity: only to open the Creem checkout window and capture its success redirect — no account or profile data is read.
• pay.praexos.com (host_permissions): so Unlock can create your Creem checkout session — no personal data is sent or stored.

Data export & deletion

You can export a single article as self-contained HTML (images base64 inline, no scripts) or the whole library as JSON at any time (Settings → Export). Deleting a page in the library removes its images too — no orphans. No server copy exists to delete.

Payment

Creem handles payment, tax, receipt, and optional refund. Stow stores only a local license flag (unlocked + order id) in IndexedDB meta — visible offline. No server to revoke; refunds are handled manually via Creem dashboard + email.

Contact

[email protected]

This policy will be updated alongside the extension; Web Store listing links to this page.