XStash Privacy Policy
Effective July 15, 2026XStash has no developer-operated data server.
The developer does not receive, retain, sell, rent, or analyze your X content, browsing activity, Notion token, or exported files. XStash handles selected data only on your device or sends it directly to Notion when you explicitly request a Notion export.
English
Data XStash handles
- The X post or Article currently being viewed, including its URL, author, text, formatting, statistics, and media URLs.
- Images requested for Markdown ZIP, PDF, or Notion export.
- A Notion integration token, parent-page ID, and cached XStash Archive database ID when the user configures Notion.
- Enabled export formats, language preference, and the current privacy-consent version.
How data is used and transferred
- Markdown and PDF are generated locally in the browser.
- Images are fetched directly from X's image host for the export requested by the user.
- Only when the user selects Notion export are selected content and images sent directly to
api.notion.comand the user's own Notion workspace. - No data is transferred to XStash, its developer, data brokers, advertisers, analytics services, or any other developer-operated third party.
Storage and retention
- The Notion token is stored only in this Chrome profile's local extension storage so it survives browser restarts. Access is restricted to trusted extension contexts, so X page content scripts cannot read it. Chrome local extension storage is not separately encrypted by XStash. The token is not synced or uploaded to the developer, and is removed when the user clears it or uninstalls XStash.
- Enabled export formats, language, consent version, parent-page ID, and cached database ID may be stored with Chrome Sync so settings work across the user's browsers.
- XStash does not retain post content. Content exists only in the user's downloaded files, print output, or Notion workspace.
Permissions
XStash requests only the permissions needed to read X detail pages, fetch X images, download user-requested files, remember settings, and connect directly to Notion after a user action.
User choice
XStash does not read X page or network content until the user accepts the in-product privacy disclosure. Users can stop all processing by disabling or removing the extension.
Limited Use
XStash's use of information complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.
Contact
Contact the developer through the email or support link displayed on the XStash Chrome Web Store listing.
简体中文
XStash 没有开发者运营的数据服务器。
开发者不会接收、保留、出售、出租或分析您的 X 内容、浏览活动、Notion Token 或导出文件。XStash 仅在您的设备上处理所选数据；只有当您明确要求导出到 Notion 时，内容才会直接发送到 Notion。
XStash 会处理的数据
- 当前查看的 X 推文或长文，包括 URL、作者、正文、格式、互动数据和媒体地址。
- 用户要求导出 Markdown ZIP、PDF 或 Notion 时所需的图片。
- 用户配置 Notion 时提供的 Integration Token、父页面 ID 和缓存的 XStash Archive 数据库 ID。
- 启用的导出方式、界面语言与当前隐私同意版本。
数据如何使用和传输
- Markdown 与 PDF 完全在浏览器本地生成。
- 图片仅为用户发起的导出，从 X 图片域名直接获取。
- 只有当用户主动选择 Notion 时，所选内容和图片才会直接发送到
api.notion.com和用户自己的 Notion 工作区。 - 任何数据都不会发送给 XStash、开发者、数据经纪商、广告或分析服务。
存储与保留
- Notion Token 仅保存在您当前 Chrome 配置的扩展本地存储中，因此重启浏览器后仍然可用。该存储仅允许可信扩展上下文访问，X 页面内容脚本无法读取；XStash 不会另外加密 Chrome 的本地扩展存储。Token 不会同步到其他设备或上传给开发者；您清除设置或卸载 XStash 后会被删除。
- 启用的导出方式、界面语言、同意版本、父页面 ID 和缓存数据库 ID 可以通过 Chrome Sync 同步。
- XStash 不保留推文或长文内容；内容只存在于您下载的文件、打印结果或 Notion 工作区。
用户选择
在用户接受产品内隐私说明之前，XStash 不会读取 X 页面或网络内容。用户可以随时禁用或移除扩展以停止所有处理。
联系
请通过 XStash Chrome Web Store 页面展示的开发者邮箱或支持链接联系开发者。