Stayslit

Security and privacy

We built Stayslit to keep as little as possible and protect what it has to keep.

Only your presence

Stayslit uses your session to keep a connection open and to ask Slack how it sees you. It doesn’t read, write or delete messages, channels or files.

Encrypted credentials

Your Slack session is encrypted with AES-256-GCM before it’s saved. The key lives outside the database. Administrators never see your credentials.

A protected account

Passwords are stored with scrypt (only a hash). Passkeys, optional two-step verification, lockout after failed attempts and a list of your devices with sessions.

What we store

Your email, optional name, schedules and settings, a 60-day presence history, the devices where you’re signed in and, if you turn them on, your phone’s alert subscription.

What we don’t do

We don’t sell your data or use it for advertising. We don’t share it except with the providers needed to run the service.

Your control

Download a copy of your data or delete your account from Settings → Security. Disconnecting a workspace deletes its credentials at once.