Privacy Policy

Last updated: 14 October 2026

SongStash is a personal Android music player. It keeps your songs on your phone so they play offline. This page explains what SongStash does with your information. In short: everything stays on your phone or in your own Google account, and nothing is sent to the developer or anyone else.

Google account access

SongStash can connect to your Google account, but only if you choose to. You sign in on Google's own page; SongStash never sees your password. It asks for:

• YouTube, read-only (youtube.readonly): to list the videos you have liked or added to your playlists, so you can choose which songs to save. SongStash cannot change anything on YouTube.
• Google Drive (drive): to keep your music folder in Google Drive and the songs on your phone in step. SongStash only works inside its own folder, "SongStash Library": it lists the songs there, downloads the ones your phone doesn't have, and uploads songs you add on your phone. When you delete a song in the app and choose "Delete from Google Drive too", it moves that song's file in the folder to your Drive Bin, where you can restore it. It never deletes files permanently, and it does not read, change or delete any other files in your Drive.

What is stored, and where

• Your songs, cover art, playlists and settings are stored in the app's private storage on your phone.
• The sign-in tokens Google gives SongStash are stored only on your phone, in storage that is not backed up or shared with other apps.
• Songs that SongStash uploads go to the "SongStash Library" folder in your own Google Drive.

What is shared

Nothing. The app has no servers, no accounts, no advertising and no analytics. Your Google data is used only to provide the features above, on your phone. It is never sold, never shared with anyone, never used for advertising, and never used to train AI or machine-learning models.

To look up song details, lyrics and artist pictures, SongStash asks free public services (Deezer, Wikipedia, LRCLIB) using only a song's title and artist. No account details are sent.

This website

The download page on this site hands out the app to people with a download code. It keeps the codes, who each one is for (as noted by the developer), how many times each has been used and when. To stop codes being guessed, it counts wrong codes for a day by a scrambled form of the internet address they came from, which can't be turned back into the address. Nothing else is collected and there are no cookies, except a sign-in cookie on the developer's own admin page.

Google API Services User Data Policy

SongStash's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Removing access and data

• In SongStash, tap Disconnect on the YouTube or Google Drive card. SongStash forgets the sign-in and asks Google to remove its access.
• You can also remove SongStash's access at any time at myaccount.google.com/connections.
• Uninstalling the app deletes everything it stored on your phone. Songs in your Google Drive stay there until you delete them.

Contact

Questions about this policy or the app: email songstash-support@googlegroups.com.