Privacy & data storage

What is stored locally

When you use the wizard, your profile, assets, liabilities, and cash flow are saved in your browser under the key finance-dashboard-storage (Zustand persist + localStorage).

• Data is stored as plain JSON text — not encrypted.
• Data never leaves your device unless you export it, print it, email a PDF, or send feedback.
• Clearing site data, uninstalling the browser, using another browser, or private browsing without export will permanently lose your snapshot on that device.
• Clearing site data or using Start over permanently deletes local finance data.

Shared or public devices

• Anyone with access to the same browser profile can read local storage via DevTools.
• Use a private browser session on shared machines.
• Prefer Export JSON backup to a location you control, then Start over when done.

Email and exports

• Email PDF sends a generated PDF through the configured email provider (Resend).
• Export JSON produces a readable backup file — treat it securely.
• Feedback sends only the name, email, and message you type.

Network calls you do not trigger

There is exactly one. Opening a gold or silver asset form fetches current per-gram rates from this site's own /api/metal-prices endpoint to prefill the rate. That request carries no finance data. The server — not your browser — fetches the public rates it caches from an external market-data provider, so your quantities and values never leave the browser.

Analytics, when you accept the consent banner, records only event names and performance measurements. It never carries names, amounts, asset names, email addresses, or export filenames.

Your choices

• Do not enter data you are not comfortable storing locally.
• Use JSON export for backups; store backup files securely.
• Disable Email PDF with NEXT_PUBLIC_ENABLE_EMAIL_PDF=false if you do not need it.