Opulence is a money tracker you fill in by hand. It never connects to your bank, so the only financial information it holds is what you typed into it.

We do not sell your information, we do not show advertising, and we run no analytics, tracking pixels or telemetry of any kind. When you open Opulence your browser talks to Opulence and to nothing else.

We are a business and we do keep what you enter — it is stored in our database so the app can show it back to you. This page says exactly what that means.

Your email address and a password. The password is stored as a cryptographic hash by our sign-in provider; neither we nor they hold the password itself.

Optionally, a display name (up to 60 characters) and a profile picture, both of which you can change or remove on the Profile screen at any time.

Our sign-in provider also keeps its own records of your sessions and of sign-in events, which in a standard configuration include the IP address a sign-in came from. Opulence itself neither reads nor stores your IP address.

Everything the app shows you is something you typed. That is: your accounts and their balances; your debts, with the amount owed, the original amount, the interest rate and the minimum payment; your recurring bills and income; your spending and income categories and the budget you set for each; your saving rate and rollover setting; your investment positions, as a ticker symbol, a quantity and, if you typed one, an average cost; the symbols on your watchlist; your net worth target, its name and its date; and the credit cards you track — a name, an annual fee, the day the card was opened, the statement credits on it and what you recorded using.

Opulence does not store credit card numbers, expiry dates, security codes, cardholder names, issuer names or bank credentials. There is no column in the database for any of them, and no screen asks for one.

One thing. Each time an account is added, removed, or has its balance changed, the database records a net worth snapshot — the total of your assets and the total of your liabilities at that moment, with the time it was taken. That is what draws the line on the Net worth screen.

These snapshots are written automatically and can only be read, not edited or deleted, from inside the app. They are removed when your account is deleted.

We do not connect to your bank, card issuer or broker, and we import no transactions. Every figure is one you entered.

We use no artificial intelligence or machine learning on your information. There is no such system in the product.

We run no analytics or advertising service, set no tracking or advertising cookie, and embed no third-party script, font or pixel in any page. Our fonts are served from our own domain.

We do not sell, rent or trade your personal information, and we do not share it for anyone else's marketing.

We send no marketing email. The only email Opulence sends is the kind you asked for: confirming your address and resetting your password.

Prices, charts and logos come from outside services. When Opulence needs a price it asks from our own servers for a ticker symbol — for example “NVDA” — and nothing more.

No user identifier, email address, session token or IP address of yours is ever sent with those requests. Those providers therefore do not learn who holds which position, or that any particular person asked. They see a symbol arriving from Opulence.

A sign-in cookie, set when you log in. It holds the tokens that keep you signed in, is marked HttpOnly and Secure so that no script on the page can read it, and lasts until it expires or you sign out.

A “theme” cookie recording whether you chose Light, Dark or System. It lasts a year, holds one word, and is deliberately readable by the page so your choice applies before anything is drawn.

Six items in your browser's own local storage, which never leave your device and are never sent to us: they remember where you left a control. They are listed in full on this page under “What is kept in your browser”.

We set no advertising, analytics or cross-site cookie, so there is nothing here to consent to beyond what makes the app work.

Running the app means other companies process some of this on our behalf. They are listed in full on this page under “Who else is involved”, with what each one receives.

Our database is hosted in the region of our database provider. If you are outside that country, your information is stored there.

Until you ask us to delete it. There is no automatic expiry, and nothing is pruned on a schedule.

Net worth history accumulates one snapshot per balance change for as long as the account exists.

If you stop using Opulence, your information stays as you left it until you ask for it to be removed.

You can see and change almost everything from inside the app, and you can take a copy of it at any time: More → Documents → Export your data gives you one JSON file containing your email address, your display name and every row of the eleven tables listed on this page.

Depending on where you live you may also have the right to ask for a copy of your information, to have it corrected, to have it deleted, to object to or restrict what we do with it, and to complain to your data protection regulator.

To make any of those requests, write to the address at the foot of this page. We will answer within 30 days.

Opulence does not yet have a button that deletes your account. We are saying so plainly rather than describing one that is not there.

To have your account and everything in it erased, email the address at the foot of this page from the address you signed up with. We will delete your sign-in record, every row you entered, your net worth history and your profile picture, and confirm when it is done, within 30 days.

We will add a way to do this yourself, and this page will say so when it is true.

Every table is protected by row-level security in the database: a policy on each one checks the signed-in user against the owner of the row, so one account cannot read another's information even if the application were wrong.

Profile pictures are held in a private store. They are not at a public address, and the app serves yours back only to your own signed-in session.

The site is served over HTTPS. The sign-in cookie is HttpOnly and Secure.

No system is perfectly secure, and we do not claim otherwise. If we discover a breach affecting your information we will tell you and the relevant regulator as the law requires, and we will say what happened.

Opulence is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has created an account, write to us and we will remove it.

If we change what we collect or who we share it with, we will change this page and move the date at the top. Where a change is significant we will say so in the app.

opulence.forecast.<id>.plan — the saving plan you built on Forecast

opulence.forecast.<id>.mode — whether Forecast is on Basic or Advanced

opulence.forecast.<id>.compare — the comparison line you switched on

opulence.debt.<id>.extra — the extra monthly payment on the Debt slider

opulence.debt.<id>.strategy — Avalanche or Snowball

opulence.positions.sort — how you sorted Positions

Your email address, your display name, and every row of: accounts, debts, recurring_bills, categories, budget_settings, holdings, net_worth_snapshots, watchlist, cards, card_credits, credit_usage.

For any request about your information — a copy, a correction, or deletion — write to us and we will answer within 30 days.