Contact
Stash is run by one person. No support team, no on-call rotation, no SLA. The product is built so the critical paths self-service; the inbox is the backup, not the front door.
Self-service first
These should never require contacting us — everything is in the app:
- Sign up. Click "Sign in" on the home page; OAuth provisions your tenant automatically.
- Upgrade or cancel a subscription.
/usage→ Manage subscription → Stripe Customer Portal. Update card, download invoices, cancel — all without us. - Export your data.
/usage→ "Download my data" (GDPR Article 20 zip with decrypted JPEGs + a SQLite of your tenant). - Backup.
/usage→ "Download backup" (same data, encrypted with your STASH_KEK if you're self-hosting). - Invite a partner.
/usage→ invite by email. Maintainer or read-only. - Audit a box, print labels, edit a floorplan. All in the app.
If you're stuck on something you think should be self-service but isn't, that's a bug worth telling us about — see "In-app feedback" below.
In-app feedback (preferred)
Once you're signed in, every page carries a floating Feedback button. It captures the page URL, your viewport size, and an optional screenshot, then drops the submission into our triage queue. We read everything and respond by shipping fixes, not replies — so when a tour + a polish pass lands a week after you submitted feedback, that's the response.
The feedback queue is operator-visible at
/admin#feedback. Submissions are tagged
"open" by default; they move to "accepted" / "rejected" /
"done" as the human reviews them.
Email — for things that really do need a human
Use email when self-service can't reach it: a refund claim (per the refund policy), an account that needs to be permanently deleted, a billing dispute Stripe alone can't resolve, or a legal / compliance request. Include your tenant name or registered email so we can correlate without back-and-forth.
No SLA. This is a solo-operator inbox. Critical issues get triaged faster, but routine email gets when-I-can attention — sometimes hours, sometimes days. If your need is time-sensitive, say so in the subject line.
Security disclosures
Email support@stash.swampcats.life with [security] in the
subject line. Security reports skip the routine queue; I aim
to acknowledge within 48 hours. Coordinated disclosure
timeline: 90 days from acknowledgement to public write-up,
sooner if the fix ships earlier.