Contents
1. Who this covers
This policy explains how the Manticore Finance desktop application ("the app") and this marketing website handle information. It is written for the way the app actually works today; where the app and the website differ, each is addressed separately below.
2. Data stored on your device
Everything you enter into the app — watchlist symbols, portfolio quantities and cost basis, income and expenses, budgets, wallet balances, liabilities, net-worth history, scenarios, and settings — is stored locally on your computer, in your operating system's user-data folder. It is not uploaded to us or to any server we control.
Because there is no cloud copy, you are responsible for your own backups. The app can export a portable backup file at your request; that file is written to a location you choose and is never transmitted anywhere.
3. No account, no telemetry
The app has no sign-up, login, or user account. It does not contain analytics SDKs, advertising trackers, crash-reporting beacons, or any mechanism that reports your usage back to the Licensor. We do not build a profile of you and have nothing to sell to third parties, because we do not collect it in the first place.
4. Third-party market data
To show live prices, charts, currency conversions and market sentiment, the app requests public data directly from third-party providers over the internet. Those requests are made from your device to the provider, and can include the identifiers needed to fulfil them — for example the ticker symbols or coin IDs on your watchlist, and the currency codes you view in. This is the information needed to look up a price; your holding quantities, cost basis, balances and other personal figures are not part of these requests.
- Stocks & ETFs — Yahoo Finance (quotes, search, historical prices, analyst ratings, dividend data).
- Crypto — CoinGecko (prices, search, market charts).
- Currency rates — the Frankfurter API, mirroring European Central Bank reference rates.
- Crypto sentiment reference — the alternative.me Fear & Greed index.
When your device contacts these providers, their own privacy policies and terms apply to those requests (they may, like any web service, log the requesting IP address). We do not control and are not responsible for their practices. The stock/crypto Fear & Greed composite is computed locally on your device — nothing about your portfolio is sent to compute it.
Your own provider key (optional). You can paste your own free CoinGecko Demo API key under Settings → Data providers to raise your rate limit. That key is stored locally with the rest of your data and is sent only on your own requests to CoinGecko, as a request header — never to us. Your relationship with that provider, including their terms, pricing and usage limits, is solely between you and them. Leave it blank to stay on the shared free tier.
Bonds are entered by hand. No free feed prices a bond by ISIN, so bond details are values you type in yourself. They stay on your device and are not sent to any data provider.
5. Licensing — verified offline
Manticore Finance requires a purchased licence key. That key is verified entirely on your own machine using an Ed25519 signature — there is no activation server, no licence check over the network, and nothing that phones home. We receive no telemetry, no install pings and no usage signal when you run the app.
One thing worth knowing: a licence names its buyer, and that name appears in the app's title bar and in the footer of any PDF report it exports. That is deliberate — it makes a leaked copy traceable — so treat your key and your exported reports as identifying you.
6. Buying and licence delivery
Buying is the one part of Manticore Finance that involves your personal data, so it is set out here in full. None of it touches the financial data in the app, which never leaves your device.
- The purchase itself. Payment is handled by Lemon Squeezy as merchant of record, not by us. They collect your name, email address, payment details and the tax information they are required to keep, under their own privacy policy. We never see your card details.
- What we receive and keep. From each order we receive your name, email address and order number, and we keep them, together with the licence key issued to you, in a record held on the licensor's own machine. We keep it to issue your licence, to re-send it if you lose it, and to meet our bookkeeping obligations. It is never sold or shared. As an existing customer you may also receive occasional emails about product updates and new tools; these are sent through Resend, every one carries a one-click unsubscribe, and you can opt out at any time. Your details are used for no other marketing.
- Your name is in your licence key. The key is signed with your name and email so that the app can display them, which is what makes a leaked copy traceable. See Section 5.
- Sending the key. Licence emails are sent through a third-party mail provider (Resend), which processes your email address and the message in order to deliver it.
- How long. Order and licence records are kept for as long as the licence is valid and for as long as tax and accounting law requires us to retain proof of the sale.
7. Encryption & security
You can set a passphrase in the app to encrypt your local data file with AES-256-GCM, using a key derived from your passphrase via the memory-hard scrypt function. With encryption on, the file is unreadable ciphertext without the correct passphrase. There is no recovery mechanism and no backdoor: if you lose the passphrase, the data cannot be recovered by us or anyone else. Please keep it safe and keep backups.
8. This website
This marketing website does not use advertising or cross-site tracking cookies, and asks you for no personal information. Every asset it needs — fonts, scripts, images — is served from this domain, so rendering the page makes no request to any other party.
- Hosting. The site is hosted on Cloudflare Pages, which as host processes the requests it serves and may keep standard access logs.
- Visitor statistics. The site loads Cloudflare Web Analytics, which counts page views and reports which pages are visited. It sets no cookies, does not fingerprint your device and does not follow you across other sites; to do that counting it processes the request's IP address, page URL, referrer and browser user agent.
- It sees this website only. These statistics are about pages on this site. They have no connection to the application: nothing in the app reports to them, and no portfolio, holding, valuation or other financial data is available to them at any point.
Optional email updates. If you choose to enter your email address in the sign-up on our free-tools pages, we use it for one purpose only: to email you when we release a new free tool or a Manticore Finance update. The lawful basis is your consent — you tick a box and then confirm through a link we email you (double opt-in), and we keep a record of that confirmation. Your address is stored and the emails are sent through Resend, our mail provider; it is never sold, shared, or used for anything else. Every update email carries a one-click unsubscribe, and you can ask us to erase your address at any time (see Section 10). We keep it only until you unsubscribe.
9. Children
Manticore Finance is intended for adults managing their own finances and is not directed to children under 16. We do not knowingly collect information from children.
10. Your rights
Your financial data. It stays on your device and we hold no copy, so you already have full control: you can view, edit, export, or permanently delete all of it directly in the app at any time. There is nothing for us to hand over or erase, because there is nothing here.
Your purchase record. The order and licence details in Section 6 are the one thing we do hold. If you are covered by the GDPR or a similar law you may ask us for a copy of it, ask us to correct it, or ask us to erase it — erasure being subject to the accounting records we are legally required to keep. Contact us using the details below; if you are unhappy with how we respond you may complain to your national data-protection authority, which in Belgium is the Gegevensbeschermingsautoriteit / Autorité de protection des données.
11. Changes to this policy
We may update this policy as the app evolves. Material changes will be reflected here with a revised "last updated" date. Continued use of the app after an update constitutes acceptance of the revised policy.
12. Contact
The data controller for the purposes of the GDPR, and the contact for any privacy question or data-subject request, is:
Manticore Finance
Rozendal 8, 8000 Brugge, Belgium
Enterprise number 1040.745.662 · VAT BE 1040.745.662 · Establishment unit 2.392.356.629
[email protected]