Privacy

Last updated 22 August 2026.

The short version

Data entry is currently manual: you type your figures in, and nothing is imported from your bank or broker today. If you never create an account, your figures stay in your browser. If you do create one, your entries are copied to our server so they follow you between devices, and this page explains exactly what that means. As connected-account features ship, this policy will describe them before they reach you.

When you are signed out

Everything lives in your browser's local storage on the device you are using. We cannot see it, we do not receive it, and clearing your browser data deletes it permanently. There is no copy anywhere else.

When you have an account

We store four things:

• Your email address. Used to identify your account and to send a reset link if you ask for one. Nothing else. We do not send marketing.
• A hash of your password. Not the password. It is salted and run through PBKDF2 with 100,000 iterations, so we cannot read it or recover it, and neither can anyone who obtained the file.
• Your entries. Holdings, accounts, debts, budget lines, goals and plans, stored as text. These are not encrypted with a key only you hold. They are protected by access controls and encryption in transit and at rest on the hosting platform, but we could technically read them, and so could anyone who compelled us to. If that is unacceptable for your situation, use the app signed out.
• Session records. A hash of your session token, when it was created and expires, and the browser's user-agent string, so you can tell one signed-in device from another.

Data is held on Cloudflare's platform (Workers and D1). Transport is HTTPS throughout.

What we do not do

• No advertising, and no advertiser is ever given access to anything you enter.
• No third-party scripts apart from Google Analytics, covered below. Beyond that, the pages load nothing from anyone else.
• No selling, renting or sharing of your data. There is no circumstance in which we would.
• No cookies of our own. Your session is kept in local storage, not a cookie. The only cookies on the site are the analytics cookies described below.

Analytics

The site uses Google Analytics to count visits: which pages are opened, when, from what kind of device and browser, and roughly where from. Google sets its own cookies to tell a returning visitor from a new one, and receives the visit data on its servers.

It does not see what you type. Your holdings, budgets, debts, plans and every other figure you enter are never sent to Google, and blocking the analytics script with a content blocker changes nothing about how the tools work.

IP addresses

Sign-in and sign-up requests are rate limited to prevent brute-force attempts. Doing that requires briefly recording a counter keyed to the requesting IP address. The counter expires on its own and is not linked to your entries.

Email delivery

If you request a password reset, the email is delivered by Resend, which necessarily receives your email address to deliver it. No other data is shared with them, and no email is sent unless you ask for a reset.

Deleting your data

• Erase everything in Settings clears this browser and, if you are signed in, zeroes your account too, so every device reads empty. There is no undo.
• Delete account on the login page removes your email, password hash, entries, sessions and reset tokens from our server entirely. Your browser keeps its own copy until you erase that separately.

Retention

We keep your entries for as long as your account exists, because that is the point of the account. Sessions expire after thirty days of no use. Reset tokens expire after one hour.

Children

This is not directed at children and is not intended for anyone under 13.

Changes

If this policy changes in a way that affects what we collect or how it is handled, the date at the top changes and the change is described here rather than made quietly.

Contact

Questions about anything on this page: privacy@10baggercapital.com.