Security

How your account and your data are protected, and how to tell us about a security problem.

Signing in

• Passwords are stored as a bcrypt hash, never in plain text.
• Two-factor authentication with an authenticator app is available on every account, and we strongly recommend turning it on.
• You can also sign in with a passkey, which uses your fingerprint, face or device PIN instead of a password.
• Several browsers and phones can be signed in at once. Settings lists every one under Security, and you can sign out any of them, or all but the one you are using.
• With Pro, a sign-in from a browser or phone your account has not used in the last 180 days sends you an email, with a button that signs out every device. Every member can see their signed-in devices in Settings and sign any of them out.
• Sign-in, sign-up and password reset are rate limited to slow down guessing.

Your data stays in your account

Every portfolio, transaction, cash entry and watchlist belongs to one account. Each request is checked against the account that is signed in, so one member cannot read or change another member's data.

All traffic to the site uses HTTPS.

What is never stored

• Your broker login. The app never asks for it: you import the statement your broker already gives you, or enter transactions yourself.
• Your card details. If you pay for Pro, you type them on Stripe's page and they never reach our servers.
• Your password in readable form. Only its bcrypt hash is kept.

Deleting your data

You can delete your account at any time from Settings, in the app or on the website. Everything in it is removed for good 24 hours after you ask, and signing in within those 24 hours cancels the deletion.

Any portfolio, transaction, cash entry or watchlist entry can also be deleted on its own from its screen, and it is removed straight away.

An account whose email address is never verified is deleted automatically 7 days after sign-up.

The privacy policy lists everything that is kept and for how long.

Imported files

A statement file you import is kept for 7 days, so that an import that goes wrong can be looked into, and is then deleted automatically. Only the site's administrator can open it. Files larger than 2 MB are not kept at all.

A file you send for a personal import template is kept until the template is ready and deleted 7 days later, 30 days at most.

Reporting a security problem

If you find a security problem, email admin@portanalytic.com with what you found and the steps to reproduce it.

The same address is in our security.txt file.