Contents
1. Who this covers
This policy explains how the Manticore Finance desktop application ("the app") and this marketing website handle information. It is written for the way the app actually works today; where the app and the website differ, each is addressed separately below.
2. Data stored on your device
Everything you enter into the app: watchlist symbols, portfolio quantities and cost basis, income and expenses, budgets, wallet balances, liabilities, net-worth history, scenarios, and settings: is stored locally on your computer, in your operating system's user-data folder. It is not uploaded to us or to any server we control.
Because there is no cloud copy, you are responsible for your own backups. The app can export a portable backup file at your request; that file is written to a location you choose and is never transmitted anywhere.
3. No account, no telemetry
The app has no sign-up, login, or user account. It does not contain analytics SDKs, advertising trackers, crash-reporting beacons, or any mechanism that reports your usage back to the Licensor. We do not build a profile of you and have nothing to sell to third parties, because we do not collect it in the first place.
Checking for updates. The app contacts this website only when you click Check for updates: it downloads a small public file listing the latest version number. The request carries no identifier and nothing about you or your data. (In Pro, the daily licence check in Section 5 can also tell the app that a new version exists, without any extra request.)
4. Third-party market data
To show live prices, charts, currency conversions and market sentiment, the app requests public data directly from third-party providers over the internet. Those requests are made from your device to the provider, and can include the identifiers needed to fulfil them, for example the ticker symbols or coin IDs on your watchlist, and the currency codes you view in. This is the information needed to look up a price; your holding quantities, cost basis, balances and other personal figures are not part of these requests.
- Stocks & ETFs: Yahoo Finance (quotes, search, historical prices, analyst ratings, dividend data).
- Crypto: CoinGecko (prices, search, market charts).
- Currency rates: the Frankfurter API, mirroring European Central Bank reference rates.
- Crypto sentiment reference: the alternative.me Fear & Greed index.
When your device contacts these providers, their own privacy policies and terms apply to those requests (they may, like any web service, log the requesting IP address). We do not control and are not responsible for their practices. The stock/crypto Fear & Greed composite is computed locally on your device, nothing about your portfolio is sent to compute it.
Your own provider keys (optional). Under Settings → Data providers you can paste your own API keys: a free CoinGecko Demo key to raise your crypto rate limit, and a Twelve Data or EODHD key to move stock and ETF data onto your own licensed feed. With a Twelve Data key, stock and ETF quotes and search come from Twelve Data; with an EODHD key, quotes, search and daily price history come from EODHD. Those requests carry the same ticker symbols described above, plus your key, and go directly from your device to that provider. Your keys are stored locally with the rest of your data and are sent only to the provider they belong to, never to us. Your relationship with those providers, including their terms, pricing and usage limits, is solely between you and them. Leave them blank to stay on the free sources listed above.
Bonds are entered by hand. No free feed prices a bond by ISIN, so bond details are values you type in yourself. They stay on your device and are not sent to any data provider.
5. Licensing: Standalone and Pro
Standalone. A Standalone licence key is verified entirely on your own machine using an Ed25519 signature: there is no activation server, no licence check over the network, and nothing that phones home. We receive no telemetry, no install pings and no usage signal when you run it.
Pro. Pro is a subscription, so it has to confirm that your subscription (or free Pro period) is active. This licence check is the only communication with our servers that the app starts on its own, and it exists only in Pro.
- What it sends: your Pro key, a random installation ID that the app creates on your computer (it is not derived from your hardware, your name or your Windows account), and the app's version number. Nothing else. Your financial data, file names, computer name and hardware details are never sent.
- When: when you activate Pro, when the app starts, about once every 24 hours while it runs, and when your computer wakes from sleep. Settings → Licence shows when the last check happened and exactly what it sent.
- What it is for: to confirm your subscription, to keep your Pro key active on one computer at a time (you can move it yourself), and to tell the app when its access ends. The server answers with a signed confirmation that lets Pro work offline until your paid or granted period ends.
- What we store: a record of your Pro entitlement: your name and email address, whether it is a subscription or a free period, its status and dates, your plan (monthly or yearly), the Lemon Squeezy subscription and customer references, a one-way hash of your Pro key (not the key itself), the installation ID of the computer Pro is currently active on and since when, and the dates of your recent moves between computers.
- What we do not store: your IP address. The licence server does not record it, and request logging is switched off. Like any internet request, the connection passes through our hosting provider, Cloudflare, which processes the IP address only to deliver it.
- Lawful basis: performance of our contract with you (GDPR Article 6(1)(b)): we cannot provide a subscription without checking it.
- How long: for as long as you have Pro, and then for up to two years after your subscription or free period ends (so a returning customer keeps their key), after which the record is deleted, except for what tax and accounting law requires us to keep about payments.
One thing worth knowing: a licence names its buyer, and that name appears in the app's title bar and in the footer of any PDF report it exports. That is deliberate, it makes a leaked copy traceable, so treat your key and your exported reports as identifying you.
6. Buying, subscribing and licence delivery
Buying is the one part of Manticore Finance that involves your personal data, so it is set out here in full. None of it touches the financial data in the app, which never leaves your device.
- The purchase itself. Payment, for a Standalone licence and for a Pro subscription, is handled by Lemon Squeezy as merchant of record, not by us. They collect your name, email address, payment details and the tax information they are required to keep, under their own privacy policy, and they run the recurring billing of a subscription. We never see your card details.
- What we receive and keep. From each order we receive your name, email address and order number; for a Pro subscription Lemon Squeezy also tells us its status and renewal or end dates. We keep these, with the licence issued to you, in our licence service, hosted on Cloudflare. We keep it to issue your licence, to re-send it if you lose it, and to meet our bookkeeping obligations. It is never sold or shared. As an existing customer you may also receive occasional emails about product updates and new tools; these are sent through Resend, every one carries a one-click unsubscribe, and you can opt out at any time. Your details are used for no other marketing.
- Your name is in your licence. A Standalone key is signed with your name and email, and Pro shows the name on your entitlement, so that the app can display them, which is what makes a leaked copy traceable. See Section 5.
- Free Pro periods. If we give you a free Pro period (for example as an earlier buyer, or as an affiliate), we use the name and email address you already gave us to create it and to email you the Pro key. No payment details are involved, and it simply ends on its end date.
- Sending the key. Licence and Pro key emails are sent through a third-party mail provider (Resend), which processes your email address and the message in order to deliver it.
- How long. Standalone order and licence records are kept for as long as the licence is valid and for as long as tax and accounting law requires us to retain proof of the sale. For Pro, see Section 5.
7. Encryption & security
On by default. The app encrypts your local data file automatically, with a key protected by your operating system (on Windows, a key sealed with Windows Data Protection for your user account). The file is unreadable to other Windows users and if it is copied to another computer. Your backups and the "Moving to a new computer" steps in the app take care of moving your data deliberately.
A passphrase adds more. You can set a passphrase in the app to encrypt your local data file with AES-256-GCM, using a key derived from your passphrase via the memory-hard scrypt function. With encryption on, the file is unreadable ciphertext without the correct passphrase. There is no recovery mechanism and no backdoor: if you lose the passphrase, the data cannot be recovered by us or anyone else. Please keep it safe and keep backups.
8. This website
This marketing website does not use advertising or cross-site tracking cookies, and asks you for no personal information. Every asset it needs (fonts, scripts, images) is served from this domain, so rendering the page makes no request to any other party.
- Hosting. The site is hosted on Cloudflare Pages, which as host processes the requests it serves and may keep standard access logs.
- Visitor statistics. The site loads Cloudflare Web Analytics, which counts page views and reports which pages are visited. It sets no cookies, does not fingerprint your device and does not follow you across other sites; to do that counting it processes the request's IP address, page URL, referrer and browser user agent.
- It sees this website only. These statistics are about pages on this site. They have no connection to the application: nothing in the app reports to them, and no portfolio, holding, valuation or other financial data is available to them at any point.
Optional email updates. If you choose to enter your email address in the sign-up on our free-tools pages, we use it for one purpose only: to email you when we release a new free tool or a Manticore Finance update. The lawful basis is your consent. You tick a box and then confirm through a link we email you (double opt-in), and we keep a record of that confirmation. Your address is stored and the emails are sent through Resend, our mail provider; it is never sold, shared, or used for anything else. Every update email carries a one-click unsubscribe, and you can ask us to erase your address at any time (see Section 10). We keep it only until you unsubscribe.
Outreach to creators and websites. We occasionally email bloggers, creators and site owners about reviews, guest posts or our affiliate program. For that we use only details they have published themselves: their name, the contact address and site they list publicly, and a short note on the topics they cover. We keep these in an internal contact list and send the email from our own mailbox (Google Workspace). Nothing is bought, shared, or combined with other sources, and the emails contain no tracking pixels. The lawful basis is our legitimate interest in contacting people whose public work relates to our product. Every outreach email says where we found the address. If you reply “stop”, or ask us to erase your details, we delete them from our list and keep only your email address on a do-not-contact list, so that we never contact you again. Otherwise we delete contacts who have not replied within 12 months.
9. Children
Manticore Finance is intended for adults managing their own finances and is not directed to children under 16. We do not knowingly collect information from children.
10. Your rights
Your financial data. It stays on your device and we hold no copy, so you already have full control: you can view, edit, export, or permanently delete all of it directly in the app at any time. There is nothing for us to hand over or erase, because there is nothing here.
Your purchase record. The order and licence details in Section 6 are the one thing we do hold. If you are covered by the GDPR or a similar law you may ask us for a copy of it, ask us to correct it, or ask us to erase it: erasure being subject to the accounting records we are legally required to keep. Contact us using the details below; if you are unhappy with how we respond you may complain to your national data-protection authority, which in Belgium is the Gegevensbeschermingsautoriteit / Autorité de protection des données.
11. Changes to this policy
We may update this policy as the app evolves. Material changes will be reflected here with a revised "last updated" date. Continued use of the app after an update constitutes acceptance of the revised policy.
12. Contact
The data controller for the purposes of the GDPR, and the contact for any privacy question or data-subject request, is:
Manticore Finance
Rozendal 8, 8000 Brugge, Belgium
Enterprise number 1040.745.662 · VAT BE 1040.745.662 · Establishment unit 2.392.356.629
[email protected]