Information you choose to enter
Track My Stack stores account information for sign-in and the ledger details you save. Ledger content can include purchases, sales, metal quantities, amounts paid, dates, dealer names, storage notes, receipts, images and other optional details.
Enter only what you want to keep in the service. A storage location, serial number or personal note can be sensitive even when the financial amount is small.
Cloud storage and the offline copy
Your account and metals cloud ledger use Supabase. The app associates the metals ledger with your account and applies account access controls. Project administrators retain database access; this is not end-to-end encrypted storage.
The browser also stores a validated local metals ledger copy and session information. The app does not encrypt that local copy. A person with access to the device or browser profile may be able to inspect it. The privacy-screen PIN does not change that.
Public pages and the app also store appearance preferences in your browser. Sign-out attempts to clear the current account’s metals ledger cache and private in-memory state. Browser settings can remove local site storage. These actions do not themselves erase the cloud ledger.
Bitcoin records and account sync
Bitcoin purchases and sales are stored in a separate account ledger and sync between devices signed in to the same account. A confirmed copy is cached in the browser for offline viewing; changing records requires a verified connection. This storage is not end-to-end encrypted.
Bitcoin records from earlier browser-only versions remain on the device where they were entered until you choose to review and sync them. Conflicting records are not silently replaced. Bitcoin goals and checkpoint settings still stay on each device and are not part of account sync.
Use the separate Bitcoin JSON export to keep a backup. The metals ledger backup does not include Bitcoin records. Export any older local records before clearing site storage. No wallet keys, seed phrases or exchange credentials are needed for this manual tracker.
Services involved
| Service | Role |
|---|---|
| Supabase | Account authentication, ledger database and server functions. |
| Cloudflare | Website delivery, public request handling, and a Web Analytics beacon intended to measure page visits and loading performance. |
| Gold API | Public precious-metal price and history requests. These requests do not need your lot records. |
| Coinbase Exchange | Public BTC/USD quotes and candles through the site’s market endpoint. Purchase and sale records are not included in these requests. |
| Google Fonts | The signed-in app may request font files. These public pages use system fonts. |
| News publishers | Featured story images may load directly from publisher image services, without a page referrer or your ledger details. Original reporting opens on the publisher’s site when you follow its link. |
Network services can receive connection information such as an IP address and request metadata. A third-party site’s own policies apply when you visit it.
Cloudflare adds its analytics beacon to delivered pages. Its purpose is website usage and performance measurement; account-ledger sync is handled separately by Supabase. Read about Cloudflare Web Analytics.
Support and security messages
The contact form collects the topic, email address and message you submit so the Track My Stack project maintainer can handle your request and respond. Submissions are saved in a private support inbox; submitting the form does not send an automated email. Contact records are separate from your account and holdings and are not automatically removed by account deletion.
Do not send passwords, reset links, session tokens or a full ledger. A minimal automated abuse check helps protect the contact endpoint. Contact submissions are not posted as public comments or testimonials. For a question about removing a contact message, contact the project maintainer.
Your copies and account deletion
Use the separate metals and Bitcoin JSON exports to keep backups of both ledgers. Metals CSV exports provide readable holdings records. See the export and restore controls. Downloads contain private details and are your responsibility to store and share carefully. Deleting a downloaded file does not delete the cloud record, and deleting a lot may leave references in your recorded activity history.
To delete your account, open Settings → Account → Delete account and cloud ledger. Choose Delete my account and type DELETE to confirm. This permanently removes your sign-in account and its active metals and Bitcoin cloud ledgers, including metals ledger attachments and account-linked server alerts. Export anything you want to keep before confirming.
After the server confirms successful deletion, the app signs out and attempts to clear the deleted account’s cached ledger in the current browser. If deletion cannot be confirmed, the local copy is kept; contact the maintainer before retrying. Downloaded exports and copies on other devices are not remotely erased and must be removed separately.
Provider backups follow separate retention processes, so account deletion does not necessarily remove backup copies immediately. Support and security contact messages remain separate from account deletion. For a privacy or data-removal question, contact the project maintainer.
On a shared computer: sign out, avoid keeping downloaded backups on the device, and clear site storage if the app reports that local data could not be cleared.
Who operates this service?
Track My Stack is maintained as an independent project. Use the contact form to reach its maintainer for privacy and security questions.