Privacy Policy
Last updated October 24, 2026
This policy explains what Track My Stack (trackmystack.org) collects, why, who helps us run the service, and how you can delete your information. We keep it short because we collect very little.
What we collect
- Account details: your email address and a password. Passwords are stored only in hashed form by our authentication provider; we never see them.
- Your holdings: the purchases you enter, such as metal, description, quantity, weight, purity, purchase date and the amount you paid.
- Basic technical data: like any website, our hosting provider receives your IP address and browser type when you visit, and keeps short-term logs for security and troubleshooting.
We do not collect your name, address, phone number or payment card details, and we don't use advertising trackers.
How we use it
- To sign you in and keep your account secure.
- To show you your holdings, their value at spot prices, and your gain or loss.
- To send account emails you ask for, such as confirming your email address.
We do not sell your personal information, and we don't share your holdings with anyone except the service providers below, who process them only to run the service.
Service providers we use
- Supabase: stores your account and holdings, and handles sign-in.
- Vercel: hosts the website.
- Google Fonts: serves the site's typefaces, which means your browser contacts Google to load them.
- MetalpriceAPI: supplies spot prices. We request prices from it; none of your information is sent to it.
Dealer links
Some links to bullion dealers are affiliate links. If you click one, the dealer and its affiliate network may set cookies to record that you came from Track My Stack. Their own privacy policies apply once you leave our site. See our Affiliate Disclosure.
Your choices and deleting your data
- You can remove any purchase at any time.
- You can delete your account from the Account section of the app. This permanently deletes your account and every purchase you entered.
- You can also email us to ask for a copy of your data or to have it deleted.
Backups kept by our providers are overwritten on their normal schedule.
Security
Data is sent over encrypted connections (HTTPS), and database rules ensure each account can read and change only its own holdings. No system is perfectly secure, so please use a strong, unique password.
Children
Track My Stack is not intended for children under 13, and we don't knowingly collect information from them.
Changes to this policy
If we change this policy, we'll update the date at the top, and for significant changes we'll notify you by email or in the app.
Contact
Questions or requests: support@trackmystack.org