🔒 Privacy Policy
Your privacy is our top priority. Learn how Free Portfolio Tracker handles your data.
Our Commitment to Privacy
100% Privacy-First: Free Portfolio Tracker is designed with privacy at its core. All your data stays on your device. We never collect, transmit, or store any of your personal information or portfolio data on our servers.
Last Updated: January 29, 2026
📦 How Your Data is Stored
Local Storage Only
Free Portfolio Tracker stores all data locally in your browser using localStorage. This means:
- Your data never leaves your device - Everything is stored in your browser's local storage
- No server communication - We don't have any backend servers collecting your data
- No cloud sync - Your portfolio data is not synced to any cloud service
- Complete control - You can export, backup, or delete your data at any time
What Data is Stored
The following information is stored locally on your device:
- Portfolio assets (stocks, crypto, metals, savings accounts)
- Holdings quantities and average costs
- Person names you configure (default: "John" and "Maria")
- Your API keys (Finnhub, Metals.dev) - stored encrypted in your browser
- Currency preference (default: USD)
- Historical portfolio snapshots (if you use the history feature)
- Price cache (temporary, refreshes every 5 minutes)
Data Persistence
Your data persists in your browser's localStorage until:
- You manually clear your browser data
- You delete the app data using the "Clear All Data" button
- You uninstall or reset your browser
🌐 External API Services
Free Portfolio Tracker uses third-party APIs to fetch real-time market prices. These services may collect data about API requests:
Finnhub Stock API
- Purpose: Fetch stock and crypto prices
- Data Sent: Stock/crypto symbols, your API key
- Privacy Policy: https://finnhub.io/privacy-policy
- Your Control: You provide your own API key; we don't control their data practices
Metals.dev API
- Purpose: Fetch precious metal prices (gold, silver, platinum)
- Data Sent: Metal symbols, your API key
- Privacy Policy: https://metals.dev/privacy
- Your Control: Optional - only used if you track precious metals
Important: We do not control how these third-party services handle your API requests. Please review their respective privacy policies if you have concerns about API usage tracking.
📊 Website Analytics
To improve the user experience and understand how our website is used, we use the following analytics services:
Google Analytics
- Purpose: Track website usage, page views, and user behavior patterns
- Data Collected: Anonymous usage data, page views, session duration, browser type, device information
- IP Anonymization: Enabled - your IP address is anonymized before storage
- Cookies: Uses cookies to track sessions and user interactions
- Privacy Policy: Google Privacy Policy
- Opt-Out: Google Analytics Opt-out Browser Add-on
Google Tag Manager
- Purpose: Manage analytics tags and tracking codes efficiently
- Data Collected: No data collected directly; manages other tracking tools
- Privacy Policy: Google Privacy Policy
Important Note: Analytics only track website usage and navigation patterns. Your portfolio data, holdings, and financial information are never sent to Google or any analytics service. All portfolio data remains stored locally in your browser only.
🚫 What We DON'T Collect
Free Portfolio Tracker does not collect, transmit, or store:
- ❌ Personal identification information (name, email, phone, address)
- ❌ Portfolio holdings or asset values
- ❌ Financial transaction data
- ❌ Your API keys or account credentials
- ❌ Location data (beyond general country-level from analytics)
- ❌ Any portfolio data transmitted to our servers (we don't have servers!)
Clear Separation: Website analytics (Google Analytics) track page visits and navigation. Your portfolio data stays 100% local in your browser's localStorage and is never sent anywhere.
🛡️ Security Measures
Client-Side Security
- XSS Protection: All user inputs are sanitized to prevent cross-site scripting attacks
- No SQL Injection: We don't use databases - no SQL injection vulnerabilities
- API Key Protection: API keys are stored in browser's localStorage (not visible in page source)
- HTTPS Required: Always access the app over HTTPS for encrypted communication with APIs
Best Practices for Users
- 🔐 Don't share your API keys with anyone
- 🔄 Regularly export backups of your portfolio data
- 🖥️ Use the app on trusted devices only
- 🔒 Lock your device when not in use
- ⚠️ Clear browser data if using a shared/public computer
✅ Your Rights and Control
You have complete control over your data:
- Export Your Data: Use the "Export as JSON" feature to download all your data
- Delete Your Data: Use "Clear All Data" in settings to permanently delete all local data
- Data Portability: Exported JSON can be imported into other tools or saved as backup
- No Account Required: No registration, no account, no emails - complete anonymity
🔓 Open Source Transparency
Free Portfolio Tracker is fully open source under the CC BY-NC-SA 4.0 license:
- 📂 Source Code: View on GitHub
- 🔍 Audit the Code: Anyone can review our code to verify privacy claims
- 🤝 Community Trust: Open source ensures accountability and transparency
- 🚫 Non-Commercial: This app cannot be resold or used commercially without permission
📝 Policy Updates
We may update this privacy policy from time to time. Changes will be reflected on this page with an updated "Last Updated" date. Since we don't collect email addresses, we cannot notify you of changes. Please check this page periodically.
📬 Questions or Concerns?
If you have questions about this privacy policy or how Free Portfolio Tracker handles data:
- 📧 Open an issue on GitHub
- 💬 Review the code yourself - it's fully open source!
- ⭐ Star the project if you appreciate the privacy-first approach