Privacy and security

The Live Tracker stores data about your real portfolio, so it's fair to know exactly what is kept, how, and what you are never asked for.

What Backtes.to never asks you for

You don't need (and will never be asked for) your broker or bank credentials. The Live Tracker does not connect to your accounts: you enter transactions yourself, by hand or via import.

If a site asks for broker credentials to "sync" your portfolio, that's a request to be wary of, whoever is making it.

Encrypted connection

Every request goes over an HTTPS/TLS connection: data travels encrypted between your browser and our servers, preventing third parties from reading or altering it in transit.

Minimised and encrypted data

Only the information strictly necessary to compute statistics and charts is stored: ISIN, quantities, dates, prices. This data is encrypted with application keys using schemes such as Fernet before being written to our systems.

Portfolio names, tags and free-text fields are treated as non-sensitive, and may be further obfuscated or anonymised in internal processes.

What is not stored matters just as much: no account numbers, no IBANs, no credentials, no identity documents.

Controlled server-side access

Computations run on protected server actions: no keys or credentials are exposed in the browser. Data stored server-side is linked to your account through an internal ID and is not shared with third parties for marketing purposes.

What you can do

• Use a password different from your broker's.
• If you only want to explore the tool, enter token quantities: percentage metrics (TWR, CAGR, return %) are identical at any scale.
• Keep separate portfolios if you'd rather no single view assembles your entire financial picture.