Privacy and your data

Your transactions never leave your device.

Not a promise about how carefully we would look after them. A description of an architecture in which we never receive them.

Start a reset

What actually happens

When you choose a file, your browser reads it into memory on your own machine. The parsing, the categorising, the duplicate detection, the recurring charge detection, the totals, the allowance and every recommendation all run there, in code that was delivered to your browser like any other part of the page.

There is no upload step because there is nothing to upload to. This site has no database of transactions, no account for you to create, and no way to look at your spending.

No bank connection, ever

ClearLedger will never ask for a banking username, password, PIN or one-time code, and has no connection to any bank or data aggregator. You export the file from your own internet banking, which means you decide exactly which accounts and which period are included, and the access ends the moment you close the tab.

If any site claiming to be us ever asks for banking credentials, it is not us.

No AI service sees your money

Categorisation and analysis are done by rules and arithmetic written into this product, not by sending your transactions to an outside model. Every figure you see is reproducible: the same files and the same answers always produce the same audit, and each one shows its working.

The only thing this site does send

If a page breaks, an error report is sent so the fault can be fixed. It carries an error message, a page name and a version number. Amounts, dates, descriptions, merchant names and account labels are stripped before it is sent, and no part of a file is ever included.

The site also loads a small analytics script that counts page visits. It does not have access to your audit, because your audit exists only inside the page's own memory and storage.

Deleting is real

Choose tab-only storage and closing the tab is the deletion. Choose to keep it on this device and it is written to this browser's own storage, where the delete button removes it. Either way there is no second copy to chase, no backup to request and no retention period to wait out.

Manage or delete your data