Privacy
Portfolio Tracker works out Irish capital gains and income tax from your broker and exchange exports. This page says exactly what it keeps, where, and who can read it. It's run by Glow Capital, the data controller for this site. Questions or requests: hello@glowcapital.io.
Your records are encrypted with a key only you hold
Everything you import or enter (transactions, accounts, your edits, settings, PPS number, address and the tax figures worked out from them) is kept in your own encrypted vault: one file per household, encrypted as a whole (AES-256). Its key is locked by your vault passphrase, your recovery code and your passkeys, which only you have. We never see or keep your passphrase or recovery code.
What that means: we can't open your records when you're signed out: not from our disk, not from our backups, and not if the server were taken. While you're signed in and have unlocked them, they're decrypted in the app's memory to do your calculations and make your reports, and are locked again when you sign out or after 30 minutes without use. We don't look at them, but we can't make a stronger promise than this while the calculations run on our server.
If you lose your passphrase, your recovery code and your passkeys, nobody can open your records, including us. You can rebuild them from your exports and your backup file.
What we keep unencrypted
A separate, small database holds only what's needed to sign you in:
- your Google account's email address, name, picture link and Google account id
- your session tokens (while you're signed in)
- which vault file is yours, and when it was created
- the locked copies of your vault's key, for each way you unlock it (never the key itself)
- a request to link with your spouse or civil partner, while it's waiting: who asked whom
Nothing about your records is in it: no amounts, holdings, names of assets or tax figures.
Where it is
On one server rented from Hetzner Online GmbH in Germany, with daily backups of that server kept by Hetzner in Germany. Your vault is as encrypted in the backups as on the server. Signing in uses Google, which tells us your email address and name; we don't use any other Google data.
What we don't do
- No analytics, advertising or tracking, and no cookies except the one keeping you signed in.
- No access logs of the pages you visit, and no record contents in the app's logs.
- Uploaded files are deleted straight after they're imported.
- Pages and downloads are sent so your browser doesn't keep a copy.
Your rights
You can download everything you've entered (Settings → backup file) and your reports at any time. You can ask for your login, vault and everything in them to be deleted. Under the GDPR you can also ask what we hold about you, have it corrected, or complain to the Data Protection Commission (dataprotection.ie).