🔒 Privacy Policy
Your privacy is our top priority. Learn how Free Portfolio Tracker handles your data.
Our Commitment to Privacy
100% Privacy-First: Free Portfolio Tracker is designed with privacy at its core. All your data stays on your device. We never collect, transmit, or store any of your personal information or portfolio data on our servers.
Last Updated: April 1, 2026
📦 How Your Data is Stored
Local Storage Only
Free Portfolio Tracker stores all data locally in your browser using localStorage. This means:
- Your data never leaves your device - Everything is stored in your browser's local storage
- No server communication - We don't have any backend servers collecting your data
- No cloud sync - Your portfolio data is not synced to any cloud service
- Complete control - You can export, backup, or delete your data at any time
What Data is Stored
The following information is stored locally on your device:
- Portfolio assets (stocks, crypto, metals, savings accounts)
- Holdings quantities and average costs
- Person names you configure (default: "John" and "Maria")
- Your API keys (Finnhub, Metals.dev) - stored encrypted in your browser
- Currency preference (default: USD)
- Historical portfolio snapshots (if you use the history feature)
- Price cache (temporary, refreshes every 5 minutes)
Data Persistence
Your data persists in your browser's localStorage until:
- You manually clear your browser data
- You delete the app data using the "Clear All Data" button
- You uninstall or reset your browser
🌐 External API Services
Free Portfolio Tracker uses third-party APIs to fetch real-time market prices. These services may collect data about API requests:
Finnhub Stock API
- Purpose: Fetch stock and crypto prices
- Data Sent: Stock/crypto symbols, your API key
- Privacy Policy: https://finnhub.io/privacy-policy
- Your Control: You provide your own API key; we don't control their data practices
Metals.dev API
- Purpose: Fetch precious metal prices (gold, silver, platinum)
- Data Sent: Metal symbols, your API key
- Privacy Policy: https://metals.dev/privacy
- Your Control: Optional - only used if you track precious metals
Important: We do not control how these third-party services handle your API requests. Please review their respective privacy policies if you have concerns about API usage tracking.
📊 Website Analytics
To improve the user experience and understand how our website is used, we use the following analytics services:
Umami Analytics
- Purpose: Track website usage and page views to understand which features are used most
- Data Collected: Anonymous page views, referrer, browser type, device type, country (no personal data)
- Cookies: None — Umami is fully cookie-free
- IP Addresses: Not stored — Umami does not log IP addresses
- Self-Hosted: All analytics data is stored on our own server, not shared with any third party
- GDPR Compliant: No personal data collected, no consent required
Google Tag Manager (GTM)
- Purpose: Manage analytics and marketing tags across the site
- Data Collected: Page views, navigation events, feature usage (e.g. refresh prices, add asset, chart views)
- Cookies: GTM itself does not set cookies, but tags deployed through GTM (such as Google Analytics) may set cookies
- Privacy Policy: https://policies.google.com/privacy
Important Note: Analytics only track website usage and navigation patterns. Your portfolio data, holdings, and financial information are never sent to any analytics service. All portfolio data remains stored locally in your browser only.
📢 Advertising
Free Portfolio Tracker may display advertisements provided by Google AdSense to help support ongoing development and hosting costs.
Google AdSense
- Purpose: Display relevant advertisements to help fund the project
- Provider: Google LLC
- Cookies: Google AdSense uses cookies to serve ads based on your browsing activity. These cookies are only loaded after you accept cookies via our consent banner
- Data Collected by Google: Browsing activity, ad interactions, device information, IP address (for ad targeting and fraud prevention)
- Personalized Ads: Google may use data to show personalized ads. You can opt out of personalized ads at Google Ad Settings
- Privacy Policy: https://policies.google.com/privacy
Your Portfolio Data Is Never Shared With Advertisers. Ad scripts have no access to your localStorage portfolio data. Ads are served based on general browsing behavior, not your financial holdings.
🚫 What We DON'T Collect
Free Portfolio Tracker does not collect, transmit, or store:
- ❌ Personal identification information (name, email, phone, address)
- ❌ Portfolio holdings or asset values
- ❌ Financial transaction data
- ❌ Your API keys or account credentials
- ❌ Location data (beyond general country-level from analytics)
- ❌ Any portfolio data transmitted to our servers (we don't have servers!)
Clear Separation: Website analytics and advertising services only track page visits and ad interactions. Your portfolio data stays 100% local in your browser's localStorage and is never sent anywhere.
🛡️ Security Measures
Client-Side Security
- XSS Protection: All user inputs are sanitized to prevent cross-site scripting attacks
- No SQL Injection: We don't use databases - no SQL injection vulnerabilities
- API Key Protection: API keys are stored in browser's localStorage (not visible in page source)
- HTTPS Required: Always access the app over HTTPS for encrypted communication with APIs
Best Practices for Users
- 🔐 Don't share your API keys with anyone
- 🔄 Regularly export backups of your portfolio data
- 🖥️ Use the app on trusted devices only
- 🔒 Lock your device when not in use
- ⚠️ Clear browser data if using a shared/public computer
✅ Your Rights and Control
You have complete control over your data:
- Export Your Data: Use the "Export as JSON" feature to download all your data
- Delete Your Data: Use "Clear All Data" in settings to permanently delete all local data
- Data Portability: Exported JSON can be imported into other tools or saved as backup
- No Account Required: No registration, no account, no emails - complete anonymity
🔓 Open Source Transparency
Free Portfolio Tracker is fully open source under the CC BY-NC-SA 4.0 license:
- 📂 Source Code: View on GitHub
- 🔍 Audit the Code: Anyone can review our code to verify privacy claims
- 🤝 Community Trust: Open source ensures accountability and transparency
- 🚫 Non-Commercial: This app cannot be resold or used commercially without permission
📝 Policy Updates
We may update this privacy policy from time to time. Changes will be reflected on this page with an updated "Last Updated" date. Since we don't collect email addresses, we cannot notify you of changes. Please check this page periodically.
📬 Questions or Concerns?
If you have questions about this privacy policy or how Free Portfolio Tracker handles data:
- 📧 Open an issue on GitHub
- 💬 Review the code yourself - it's fully open source!
- ⭐ Star the project if you appreciate the privacy-first approach