Privacy Policy

Last updated: August 2026

VaultMyStack is built for people who value privacy. No account is required to use the core tools, and you decide where your Vault Report data lives.

Your privacy

You have two ways to use the site:

1. Browser-only (no account). Everything stays on your device. We never see your holdings, your name, or any personal details. Vault Report saves your data in your browser's local storage only, and you can clear it anytime. This is the most private option. The trade-off is there's no automatic backup — use Backup / Export (JSON, CSV, PDF) to keep your own copies, and note that clearing your browser data or switching devices or browsers will lose it.

2. Cloud sync (optional account). If you create an account, your email address and the vault data you choose to save are stored by our service providers — Supabase (the database), Resend (email sign-in codes), and Cloudflare (hosting) — so your vault can sync across devices. Sign-in uses a one-time code sent to your email; no password is stored. Only your email address is required to log in — you provide no other information to start syncing. This data exists only to provide the sync service, and you can delete your account and all associated data at any time.

Live price data

To show current prices, your browser requests data directly from third-party market-data providers (for example, a precious-metals price API for gold and silver, and a cryptocurrency price source for Bitcoin). When your browser makes those requests, the providers may receive standard technical information such as your IP address, as is normal for any web request. Their handling of that information is governed by their own privacy policies.

Information we collect

In the browser-only version we collect no names, contact details, or holdings. If you create an account, we store only your sign-in email and the vault data you save, as described above. Like most websites, our hosting and infrastructure providers may process standard server logs (such as IP address, browser type, and pages requested) for security and reliability.

Analytics

We use Google Analytics to understand basic, anonymized site traffic — which pages are visited and general trends — which helps us improve the site. It is not used to personally identify you, and we do not use advertising or ad-targeting cookies. Google Analytics does set its own analytics cookies and may process details such as your IP address and device/browser on our behalf; you can opt out with Google's browser add-on (tools.google.com/dlpage/gaoptout) or your browser settings. The local storage Vault Report uses is separate, is not a cookie, and is never shared with us.

If you contact us

If you email us, we receive the information you choose to include (such as your email address and message) and use it only to respond to you.

Accounts and affiliates

Optional accounts with cloud-synced vaults are now available (see "Your Vault Report data" above for exactly what is stored and how it is protected). VaultMyStack may also include affiliate links to third parties (such as dealers or storage providers); those parties operate under their own policies.

Children

VaultMyStack is intended for adults and is not directed to children under 18.

Changes

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above. Questions? Please contact us.