Privacy Policy
How astt handles your data
What we collect
Depending on your deployment, you can sign in with Google or a self-host password. Google sign-in provides your name, email address, and profile picture. Any financial data (accounts, holdings, balances) is entered by you manually and stored in your private database.
What we don't collect
We never access your real bank or brokerage accounts. We do not collect your passwords, browsing history, location, or contacts.
Third-party services
We fetch public market prices from Yahoo Finance and CoinGecko using only the ticker symbols you enter. No personal information is sent to these services.
Data sharing
Your data is never sold, rented, or shared with third parties for any purpose.
Your control
You can export all your data or delete your account at any time from the Settings page.
Authentication
Authentication is configured by the deployment owner. Google OAuth never shares your Google password with the app; self-host passwords remain in the deployment environment and are not stored in the application database.
Analytics and telemetry
We use Vercel Analytics and Speed Insights to understand basic usage and page performance. These tools do not include your manually entered account names, holdings, balances, or transaction notes.
Contact
For privacy or data requests, email us at support@astt.app
Public Demo data
The public Demo uses the essential HttpOnly asset-tracker-demo-visitor cookie to resume your temporary workspace. A purpose-separated pseudonymous source hash is used only for abuse and capacity control; this feature does not store raw IP addresses. Demo access expires after 24 hours, and its synthetic data is targeted for physical deletion within the following 24 hours. Outages may delay physical deletion, but access remains blocked after expiry. Changes made in the Demo never transfer to a formal account.
Last updated: August 2026
← Back to Login