The privacy model, the complete network surface on one page

This page is a stub. The full guide is written against the shipped app version and is on its way.

The default is silence. Open the app, import files, reconcile, compute, download reports, and nothing crosses the network, which you can watch for yourself in the browser’s network panel. The complete list of exceptions fits on one page, this one.

One, wallet scanning, when you use it. Paste an address and the app fetches that address’s public history from public block explorers. What travels is the address you typed, already public on a public ledger. See wallet scanning.

Two, price lookups, when you use them. Valuing an asset needs a market price, fetched from public price sources. What travels is which asset and when, never your holdings or amounts.

Three, exchange sync, when you use it. Requests signed in your browser pass through a stateless relay to Kraken or Binance. Your API secret never leaves your machine, the relay stores nothing, and you can run your own, see the relay.

Sharing, when you use it, is sealed before it moves. A shared workspace is encrypted in your browser and the key travels only inside the link itself, in the fragment a browser never sends to any server. We store a box we cannot open, the full story is on the security page.

What never exists anywhere. No account, no signup, no profile, no analytics tied to you, and no copy of your transactions on any server of ours, not encrypted, not anonymised, not at all, except the sealed shares you create on purpose. A licence key verifies offline in the browser. The strongest privacy promise is the one that requires no trust, and this page is short because the design is.