Privacy Policy

Last updated: 2026-07-20

Data we collect

• Account: email address, hashed password (argon2id), optional display name.
• Optional MFA secret (encrypted at rest in PostgreSQL).
• Cashflow items and Net Worth entries you create.
• Operational telemetry: request paths, response times, error stacks (no payloads).

How we use it

Solely to provide the Service: authenticating you, storing your records, computing your RatRace Score, and producing exports/reports you request.

Where it lives

Production data is stored in Microsoft Azure (PostgreSQL Flexible Server) in the region you selected at sign-up. Backups are encrypted at rest and retained per Azure defaults. No data is sold or shared with advertisers.

Cookies & analytics

We use Google Analytics (GA4) to understand aggregate traffic patterns — pages viewed, referral source, and general device/location info. Google Analytics uses first- and third-party cookies for this purpose. We do not use analytics data to identify you personally, and analytics cookies are not tied to your RatRaceScore account. You can opt out using Google's Analytics opt-out browser extension or any tracking-blocker extension.

Sub-processors

• Microsoft Azure (compute, database, storage, telemetry, transactional email).
• Open Exchange Rates (publishes daily FX rates only; we send no user data).
• Google Analytics (aggregate website traffic only; never receives account or financial data).
• Google / Meta — if you choose to sign in with Google or Facebook, we receive your name, email address, and profile photo from that provider; we never receive your password.

Data retention

We retain your account data for as long as your account is active. If you delete your account, your records are removed immediately and irreversibly, as described below. Backups are retained for a limited period per Azure defaults before being purged.

Children's privacy

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us at privacy@ratracescore.com and we will delete it.

Your rights

You may export all your data at any time (JSON export) or permanently delete your account from your Profile page. Deletion is immediate and irreversible.

Contact

For privacy questions: privacy@ratracescore.com