Short, because the architecture does the work.
Your transaction files never leave your device — everything is parsed and computed in your browser. Your account stores only the computed session summary that fills your dashboard, and you can delete it. The free check, the session computation, and your report and data file all live on your device. We cannot see them, so we cannot lose them.
Three things, all at your initiative: forms you submit (the contact form and the CPA network form), which are processed and stored by our hosting provider, Netlify, and delivered to us; ordinary web requests for the pages themselves, which Netlify serves and logs like any host; and — if you purchase and sign in — your synced profile: the computed session summary that fills your dashboard (day-level totals per platform, the reconciliation figures). Never your raw transaction files: our server is built to refuse them. Never include transaction files or account numbers in a form.
Sign-in is passwordless (an emailed link — we never store a password). Your synced profile exists so your numbers follow you across devices; you can delete it any time from the dashboard's account bar, and it's gone from our storage. Your purchase record is retained for accounting. Your own exported files remain the source of truth — keep them; they rebuild everything.
No advertising trackers, no sale of data, no gambling-operator ad placements. Prices and figures shown on this site render from the site's own code, not third-party scripts — the only external resources are fonts and one charting library.
Payment processing is handled by Stripe on Stripe's own pages and governed by its terms — your card details never touch our site. We receive the purchase confirmation and your email address, nothing more.
Questions? Contact us. This page describes the site's behavior as built; it will be updated as the product grows.