Security and data handling

What we collect, how you sign in, and what happens to your data, described plainly and without overstating what has and has not been verified.

Account information we collect

Creating an account collects your name and email address, used to identify and operate your account. If you sign in with Google, we receive the profile information Google shares for that sign-in.

Financial information you enter

Budget entries (amounts, categories, currencies, and dates) are typed in by you and stored to provide the budgeting service. Amounts are stored as exact integers in the currency's smallest unit, not floating-point numbers, to avoid rounding drift.

Authentication methods

You can sign in with an email and password, or with Google. Linking a Google account to an existing email/password account requires the Google account's email to already be verified and to match.

Bank credentials

DogeHub Budgeting does not collect or store bank account credentials, and does not connect to any bank-aggregation service. Every entry is entered manually.

HTTPS

This application is intended to be served over HTTPS in production. Whether a given deployment enforces this depends on hosting/proxy configuration rather than a hardcoded in-app redirect; we are not claiming a specific enforcement mechanism beyond standard deployment practice.

Data export

You can export your data from your profile as a ZIP of CSV files (budget entries, plans, recurring rules, monthly summaries, reviews, and basic account details), or a single combined CSV if ZIP support is unavailable on the server. The export never includes your password or authentication tokens.

Account deletion

Deleting your account is permanent. It is a hard delete, not a deactivation, and removes your budget entries, plans, reviews, and recurring rules along with it. You must confirm your current password first.

Retention and purging

Individual budget entries are kept for a limited window (currently 24 months). After that, a monthly job summarizes the month into per-currency totals and removes the underlying entries. A month with any currency you have not yet confirmed is skipped entirely until you resolve it.

Third-party services

  • Google (sign-in)

    Used for optional Google sign-in and account linking.

  • Google Analytics

    Collects usage and performance information such as pages visited.

  • Google AdSense

    May be used on eligible public content pages if advertising is enabled; never inside the private budgeting workspace.

  • Bunny Fonts

    A third-party CDN used to load this site's typography.

What we do not claim

  • Encryption at rest is not independently verified or certified.
  • DogeHub has not undergone a third-party security audit or penetration test.
  • We do not claim compliance with a specific security or privacy certification standard.
  • No security measure is guaranteed to be perfect. If you find an issue, please report it.

Reporting a security concern

If you believe you have found a security issue, please report it via the Contact page rather than disclosing it publicly.

Go to Contact