What SubTrack holds, and where

What never happens

• No bank connection. SubTrack does not ask for Open Banking consent, card numbers or transaction access.
• No account. There is nothing to sign up for, so there is no profile holding your spending.
• No email scanning. SubTrack does not read your inbox looking for receipts.
• No upload. Subscriptions, prices, renewal dates, notes and ratings are not sent anywhere. The arithmetic runs in the page.
• No exchange-rate lookups. Currencies are kept separate unless you type a rate in yourself.

Where the audit lives

By default, in the memory of the tab you have open. Closing or reloading it ends the audit, and the page warns you before that happens if you have unsaved work.

There are two ways to keep it, and both are things you choose:

• Remember this audit on this device. A switch in Data & settings, off by default. When on, the audit is stored in this browser using IndexedDB. It is not synced, not backed up and not sent anywhere. Turning the switch off deletes the stored database rather than blanking it.
• Save a SubTrack file. A .subtrack file downloaded to your machine, holding the audit as plain versioned JSON. It is yours to keep, move or delete like any other file.

If browser storage is on, anyone using this device and this browser could open the audit. That is the trade for not having a password.

Files you open

A project file or CSV you open is read in the page and never uploaded. Both are treated as untrusted input: every field is checked against the shape it must have, text is stripped of control characters, and anything unrecognised is dropped rather than carried through. Nothing inside a file is ever executed, and no URL inside one is ever followed.

Analytics

SubTrack does not attach your subscription data to anything. If usage analytics are ever added, they will record only that a feature was used — an audit was started, an export was clicked — and never what was in it: no names, prices, renewal dates, notes, ratings or scenario selections.

The offline worker

SubTrack installs a service worker so it opens without a connection. It caches SubTrack’s own pages, scripts, styles and icons. It does not cache your audit, because your audit never travels over the network in the first place.

What is stored in this browser

• subtrack.theme — light, dark or system. A display preference.
• subtrack.persist — whether you switched on keeping the audit here.
• An IndexedDB database named subtrack, only while that switch is on.