How your privacy works
EuroTracker is built so that only you can read your financial data. Not even the server's operator.
Encrypted in your browser
- Your browser turns your password into two keys. One goes to the server to log you in. The other stays on your device and unlocks your data.
- Transactions, categories, rules and budgets are encrypted in your browser (AES-256-GCM) before they are stored.
- Bank files (CSV, Excel, CAMT) are read in your browser and never sent to the server unencrypted.
- All charts and calculations run on your device.
What the server does see
- Your email address and name.
- How many encrypted items you have, their size and when they changed.
- With a bank connection: which bank, and the Enable Banking session (stored encrypted). While fetching, your transactions briefly pass through the server's memory. They are encrypted with your key immediately and never read by the server again. If you'd rather avoid that, use file import only.
Forgot your password
Because nobody else can read your data, nobody can reset your password for you either. That's what the recovery code you get at signup is for. Lose both your password and your recovery code, and your data can't be recovered.
Page security
All code is served from this server. There are no external scripts, trackers or ads, and a strict Content Security Policy blocks everything else.
Back