Privacy policy
Last updated 29 September 2026. This policy covers the website portfolio.essq.app and the Portfolio Tracker app for Windows.
The short version
Portfolio Tracker shows the value of your stocks, funds, crypto, trading cards and comics. There are no ads, no tracking and no selling of data. Your portfolio is encrypted on your own device before it is saved, so the stored copy can't be read by anyone else, including whoever runs the site.
What is stored
- Your account: your username, the date you signed up, and a scrambled (hashed) key that proves your password is right. Your password itself is never sent to or stored on the server.
- Your portfolio: your holdings, amounts, purchase prices, goals and display settings. These are encrypted in your browser or app with a key made from your password before they are uploaded. The server only stores the encrypted data and cannot decrypt it.
- Usage counts: once a day, a scrambled ID (not your username) and the date are recorded so the site owner can see how many people use the service. These records are deleted automatically after 40 days.
- On your device: a sign-in cookie that keeps you signed in, a copy of your encryption key, recent prices to make the page load faster, and (in the Windows app) window position and settings. Signing out removes the key and saved data from that device.
Price data and other services
To show prices, the service looks up the names of the stocks, cards, comics and coins you hold (for example "AAPL") from Yahoo Finance, PriceCharting and CoinMarketCap, through the site's own server. These price lookups are sent without your sign-in cookie, and amounts and purchase prices are never sent. The risk rating in the banner is worked out on the site's server from the names and relative weights (never the amounts) of the holdings being rated, sometimes with help from an AI model (Cloudflare Workers AI); friends' ratings are not stored. Company logos are loaded from Google's public favicon service, and pictures of cards, comics and coins from PriceCharting and CoinMarketCap. The site is hosted on Cloudflare, which processes requests to deliver it.
What is not collected
No email address, real name, location, contacts, payment details or advertising identifiers. There are no analytics or advertising cookies, and nothing is shared with or sold to third parties.
Deleting your data
You can remove holdings at any time in the app. To delete your whole account, email support@essq.app from the address you'd like the reply sent to, with your username; the account record and encrypted portfolio are then removed. Because the portfolio is encrypted with your password, a forgotten password cannot be reset and that portfolio cannot be recovered.
Children
The service is not directed at children under 13.
Changes and contact
If this policy changes, the date at the top will be updated. Questions or deletion requests: support@essq.app.