Privacy policy
netrack is a small, free app for tracking your own net worth. It stores only what it needs to work, it has no ads and no advertising trackers, and it never sells data. This page explains what is stored, why, and who helps run the service.
Who is responsible
Šimon Husák, Mostek 120, 544 75 Mostek, Czech Republic, runs netrack as an individual and is the controller of your personal data. Reach out at info@shusak.eu for anything in this policy.
What netrack stores
- Account: your email address, and a display name taken from the part of it before the @ (shown to the people you share with). An email address is needed to have an account; everything else you enter is up to you. There are no passwords. You sign in with an emailed sign-in link and 6-digit code, or with a passkey (the passkey's public key, its technical identifiers and the label you give it are stored, never a secret).
- Your financial data: everything you enter: workspaces, net worths, groups, accounts, recorded values with their currencies and dates, plan goals with their deposits, the Home widgets a workspace chose, and imported spreadsheet rows. It is visible only to you and to the people you invite to a workspace or a net worth, with the role you choose. Members of a shared workspace or net worth see each other's name and email address.
- Preferences: display currency, favourite currencies and net worths, rounding, theme, which totals to show, the check-in schedule and similar settings, stored with your account. Your time zone and chart choices are kept only in cookies in your browser (see below), not on the server.
- Sessions and security: the sessions of your signed-in devices (with the device description and IP address, so you can sign out other devices), counters that limit sign-in attempts, emails and requests (they hold your address or your IP address and are deleted after a day), and an audit trail of sensitive actions such as sign-ins, passkeys added or removed, deletions (single values included), invitations accepted, declined or revoked, changes of members, API keys and apps connected or disconnected, imports and exports, and changes made through a key or a connected app. The trail records what happened, by whom, to which workspace, net worth or item (by its id) and when, plus the IP address for a sign-in and the invited address for an invitation. It never holds the content of a file or your figures.
- API keys for AI agents: if you make a key to connect an AI assistant (MCP), netrack stores its name, its first characters, whether it may only read or also write, when it was made, last used and runs out (a year after it was made), and a one-way hash of it. The key itself is shown once and cannot be recovered. netrack emails you when a key is made, and changes made through a key appear in the audit trail. A key reaches the workspaces and net worths you can reach in the app, including exporting a whole workspace and reading the email addresses of its members; a read only key cannot change anything, but it can still read and export. A key cannot make or revoke keys, manage your sessions, passkeys or connected apps, change your email address, delete your account, or make anyone an owner. Treat a key like a password.
- Files you download: when you export a workspace (a CSV backup, an Excel file or a PDF report), netrack builds the file on its server at that moment, sends it to you and keeps no copy. Nothing is sent to anyone else. A CSV backup holds the data of the workspace, but not its members, invitations, API keys or preferences.
- Apps you connect by signing in: if you connect an AI assistant (MCP) by signing in instead of using a key, netrack stores the app's name and the address it sends you back to, what you allowed it to do, when, and the refresh tokens it was given (only as one-way hashes), which last 30 days. Its access tokens are signed, last 15 minutes and are not stored. netrack emails you when an app is connected. You see and disconnect these apps under More, MCP; an app connected this way has the same reach as a key (above), and changes made through it appear in the audit trail.
- Email: sign-in messages, invitations, the messages that confirm a new address or the deletion of your account, a notice when an API key is made or an app is connected, and check-in reminders: a new net worth sends the people who can edit it a reminder on check-in day (monthly unless changed) that you can turn off in the net worth's settings or unsubscribe from in one click. The unsubscribe link works without signing in; netrack then keeps a note not to write to you (with your address, moved along if you change it) until you turn reminders back on or delete your account.
- Visit statistics: netrack counts page views with Vercel Web Analytics: the page, the country, the browser and device type and where the visit came from, as totals. Inside the app, the address of a page is sent without its query string and with every id replaced by a placeholder, so it never names your workspaces, accounts or a sign-in request. It sets no cookie, does not follow you across sites and does not build a profile of you.
- People who are invited: when someone invites your address, netrack stores it with the role and the inviter for up to 30 days (then it is deleted, or it becomes your membership if you accept; inviting the same address again renews it), sends you an email (at most one a day for the same workspace or net worth), and records the invitation in the inviter's audit trail.
Why, and on what basis
- To provide the service you asked for: keeping your data, showing it back to you and sending the emails you request (performance of a contract).
- To send a reminder on check-in day, which you can turn off or unsubscribe from in one click (performance of a contract).
- To keep the service secure and prevent abuse: rate limits, sessions and the audit trail, which also serves to establish or defend legal claims (legitimate interest).
- To send an invitation to the address a workspace owner typed, on the owner's behalf (legitimate interest of the owner and of netrack in letting people share).
- To count page views and improve the site, without cookies or profiles (legitimate interest).
netrack does not use your financial data for advertising, profiling or analytics, and does not share it with anyone beyond the processors below, the people you share with and the AI assistants you connect yourself. The visit statistics above count page views only. netrack makes no automated decisions or profiling that have legal or similarly significant effects on you, and it does not rely on your consent for any processing, so there is nothing to withdraw.
Cookies and local storage
Only what is needed to work, so there is no cookie banner:
| Name | Purpose | Lifetime |
|---|---|---|
| Session cookie | Keeps you signed in. It also carries a signed copy of your session details for 5 minutes, so pages load faster | 30 days, renewed while you use it, or until you sign out |
| Sign-in helpers | Hold a passkey or app-connection request while you complete it | A few minutes |
| netrack-theme | Remembers light, dark or system theme | 1 year |
| netrack-charts | Remembers the chart range, granularity and view you chose | 1 year |
| netrack-tz | Remembers your browser's time zone, so that "today" is your today | 1 year |
| Local storage: recent emails | Suggests the email addresses you used to sign in on this device | Until you clear site data |
Who processes data for netrack
- Vercel, hosting and delivery of the app (functions run in Frankfurt, Germany) and its cookie-free visit statistics. Vercel keeps short-lived request logs (IP address, browser, address requested) to run and secure the service.
- Neon, the Postgres database that stores your data (AWS eu-central-1, Frankfurt, Germany).
- Resend, delivery of the emails netrack sends (your address and the message content).
Vercel, Neon and Resend are companies based in the United States, so some data (logs, statistics, support access and email delivery) may be processed there. Transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified and otherwise on the European Commission's standard contractual clauses in the provider's data processing agreement. Ask for details at the address below.
AI assistants you connect. netrack lets you give an AI assistant access to your own data with an API key or by signing in. That is your choice: whatever the assistant reads is sent to its provider and handled under the provider's terms, not by netrack. A key or a connected app sees only what you can see (which includes exporting a workspace) and can be revoked or disconnected at any time. netrack does not send your data to any AI service by itself.
Exchange rates come from public sources (the European Central Bank through Frankfurter, and an open currency dataset). Those requests are made by the server and carry none of your data.
How long data is kept
- Your account and financial data are kept until you delete your account.
- You can delete your account yourself in the app settings (after confirming by an emailed link). Your account, sign-in methods, settings, API keys, audit trail, pending invitations and reminder choice are removed, and so are the workspaces you are the only owner of, with everything in them, even if other people were members (the app lists them before you confirm). A workspace with another owner stays for them, without you. Anyone can also leave a workspace on their own without deleting their account. You can also change your email address in the app settings. Nothing that identifies you is kept afterwards, except values you entered in a workspace that stays for its other owners (no longer linked to you), an invitation sent to your address that is recorded in the inviter's audit trail (up to about 400 days), abuse counters (up to a day), and backups and hosting logs until they age out.
- Expired sessions and sign-in tokens are removed automatically every day, abuse counters after a day, audit entries about single values after 90 days and other audit entries after about 400 days.
- An API key stops working when you revoke it or a year after it was made (its record is removed about a month later), and all of them go when you delete your account. When you disconnect a connected app, its tokens are deleted and it can no longer get new access; an access token it already holds runs out within 15 minutes. Otherwise its tokens are deleted a day after they run out.
- Backups of the database follow the retention of the database provider and age out on their own; a deleted account is not restored from them.
Your rights
You can ask for a copy of your data, a correction, deletion, a limit on processing, or to object to it, and you can ask for your data in a portable form. You can also download a whole workspace yourself at any time (More, Export and import) as a CSV backup, an Excel file or a PDF report. You can object at any time to processing that rests on legitimate interest. Email info@shusak.eu and I will answer within a month. If you think your data is handled wrongly, you can also complain to a data protection authority: in the Czech Republic that is the Úřad pro ochranu osobních údajů (Office for Personal Data Protection, uoou.gov.cz), or the authority where you live or work. No data protection officer is appointed.
Children
netrack is not meant for anyone under 16. If you believe a child under 16 has an account, write to me and it will be deleted.
Changes
If this policy changes in a way that matters, the date at the top changes and, for significant changes, everyone with an account is told by email.
Contact
Šimon Husák, Mostek 120, 544 75 Mostek, Czech Republic, info@shusak.eu