Privacy Policy

Nabutok is a household net worth tracker. You can reach us at info@nabutok.pro. This policy covers nabutok.pro and app.nabutok.pro.

• Account details: your email address, display name, and — if you sign in with Google — the profile picture Google returns. Passwords are never stored in readable form; we keep a scrypt hash.
• The data you enter: the assets you track, the amounts you contributed or withdrew, the dates of those events, the household members you name, and the currency you prefer.
• Technical data our hosts record in the normal course of serving the site: IP address, browser user agent and request timestamps.

We do not ask for bank credentials and we do not connect to your bank. Every figure in Nabutok is one you typed in or a market price we looked up for a ticker you chose.

To give you an account, keep your data separate from everyone else’s, send you the transactional email the product needs (address confirmation, password reset), and keep the service running and secure. We do not sell your data, we do not share it with advertisers, and we do not use it to train anything.

• Vercel — serves this site and the web app, and records standard request logs.
• Railway — runs the API and the PostgreSQL database that holds your data, hosted in the EU (Amsterdam).
• Google — only if you choose to sign in with Google, which tells us your email, name and profile picture. We never receive your Google password.
• Resend — delivers transactional email; it sees the recipient address and the message.
• Binance and Yahoo Finance — supply market prices. We send them a ticker symbol; we never send anything about you.

One cookie, nabutok_session. It is httpOnly, signed, and it is what keeps you signed in. There are no advertising or cross-site tracking cookies.

Your data stays until you delete it or ask us to delete your account. Guest sessions — the “look around first” mode — create a throwaway account that is swept automatically once it is abandoned, unless you sign up and keep it.

You can ask for a copy of your data, a correction, or its deletion. Write to info@nabutok.pro and we will act within 30 days. If you are in the EU or UK you also have the right to complain to your local data protection authority.

If this policy changes materially we will update the date at the top of this page and, where the change affects how we use your data, tell account holders by email.