Skip to main content

Privacy Policy

Last Updated: October 1, 2026

At SubTracking ("we", "us", or "our"), based in Alberta, Canada, we believe your financial data belongs to you—and only you. This Privacy Policy explains how we handle your information when you use our web application (the "App") located at https://www.subtracking.app.

TL;DR: SubTracking is built on a "Local-First, Zero-Knowledge" architecture. Free users' subscription data is stored entirely on their local device and never touches our servers. Pro users who enable Cloud Sync have their entire vault and Time-Machine snapshots encrypted directly on their device using AES-256-GCM before transmission. Our cloud servers receive only scrambled ciphertext that we cannot decrypt or read. We operate with zero tracking cookies, zero advertising pixels, zero keystroke logging, and zero third-party telemetry. When offline, changes are safely kept locally on your device and automatically sync the moment you reconnect. We align our practices with Canada's strict privacy laws (PIPEDA/PIPA).

1. Information We Collect (and Don't Collect)

A. Local Storage Data (Free & Core Tracking)

By default, the subscriptions, costs, categories, and renewal dates you enter into the App are stored directly in your browser's Local Storage. For free users, this data never leaves your device and is not transmitted to our servers. If you clear your browser cache or switch devices, this data will be lost unless you manually back it up using our encrypted JSON export tool.

B. Pro Cloud Sync & Time-Machine Snapshots (Zero-Knowledge AES-256-GCM)

Pro subscribers can optionally enable Cloud Sync to access their vaults across multiple devices and maintain rolling 30-day Time-Machine snapshots. Before any data leaves your browser, the entire vault is encrypted on your device using AES-256-GCM encryption with PBKDF2 key derivation (100,000 iterations). Our cloud infrastructure (powered by Supabase) stores only this encrypted ciphertext (vault.json). We do not hold your encryption keys. Neither SubTracking, nor Supabase, nor any third party has the ability to view, decrypt, or access your plaintext subscriptions or financial amounts.

Offline Resilience: If your device loses internet connectivity, SubTracking continues operating seamlessly in offline mode, saving changes locally. The moment your device reconnects online, the app automatically encrypts and syncs your latest changes to your cloud vault.

C. Account Email (for Pro Cloud Sync Users)

If you sign in to use Pro Cloud Sync, we store your email address via Supabase Authentication strictly to deliver one-time login passcodes (OTP) and associate your encrypted cloud backup with your account. We never sell, rent, or share your email address with advertisers or third parties.

D. Payment Information (Gumroad Merchant of Record)

We do not process or store payment cards directly. All payments for Pro licenses are handled securely by our Merchant of Record, Gumroad. We never see, receive, or store your credit card or banking details. Gumroad shares your license key and verification status with us to unlock Pro features.

E. Zero Advertising Pixels, Zero Keystroke Logging & Zero Third-Party Telemetry (Anti-Wiretapping / CIPA Affirmation)

SubTracking is strictly engineered to ensure complete digital privacy and wiretapping cleanliness:

  • Zero Advertising Pixels: We do not load, embed, or integrate third-party advertising or conversion pixels of any kind, including Meta (Facebook) Pixel, TikTok Pixel, Google Ads tags, LinkedIn Insight tags, or X (Twitter) pixels.
  • Zero Keystroke Logging or Session Replay (CIPA Compliance): We do not deploy session replay software, mouse movement trackers, DOM screen recording, or keystroke loggers (such as Hotjar, FullStory, Microsoft Clarity, LogRocket, or Inspectlet). Your keystrokes and interaction patterns remain strictly private on your device.
  • Zero Tracking Cookies & No Cross-Site Tracking: We do not set commercial tracking cookies, behavioral ad cookies, canvas fingerprints, or cross-site device graph identifiers.
  • First-Party Performance Metrics: We may use privacy-preserving diagnostics (such as Vercel Analytics) solely to collect aggregated, anonymous performance metrics (e.g., page load speeds, aggregated browser types). This system is 100% cookieless, does not track individual user identities across sites, does not record IP addresses, and has zero visibility into your subscription entries or financial amounts.

2. How We Use Your Information

Because of our privacy-first and zero-knowledge model, our use of information is strictly limited to:

  • Delivering the Service: Keeping your local vault running and syncing your encrypted vault across devices if you are a Pro user.
  • Authentication: Sending secure OTP verification emails so you can log into your Pro cloud backup.
  • License Verification: Confirming your Pro license status with Gumroad.
  • Support: Responding to help requests if you contact us directly.
  • Zero Monetization: We will never sell, harvest, or commercialize your personal or financial data.

3. Data Retention & Deletion

Local Data (All Users): Your local subscription data resides in your browser's storage. You can delete all local data at any time by clearing your browser cache or clicking the "Factory Reset" button in the App's menu.

Cloud Data (Pro Users): For Pro users utilizing Cloud Sync, your encrypted vault is retained in Supabase Storage while your account remains active. You can request permanent deletion of your cloud vault and authentication record at any time by emailing support@subtracking.app.

4. Security & Cryptography

SubTracking enforces end-to-end client-side cryptography. When exporting backups or syncing to the cloud, data is encrypted directly on your device using AES-256-GCM and PBKDF2 with 100,000 hash iterations via the browser's native Web Crypto API.

All web traffic is transmitted exclusively over industry-standard Transport Layer Security (HTTPS/TLS). Because local data security also relies on your physical device, we recommend keeping your device protected with a passcode or biometric lock.

5. Changes to This Policy

We may update this Privacy Policy from time to time. When significant updates are made, we will update the "Last Updated" date at the top of this page. Continued use of the App after changes constitutes acceptance of the updated policy.

Questions about our privacy architecture? Contact us at support@subtracking.app

← Back to SubTracking