What is stored, and where
Your accounts, transactions, budgets, recurring items, rules and settings are kept in your browser's IndexedDB storage for this site, and nowhere else. The light or dark choice is kept in local storage. Ballast asks the browser to keep this data even when space runs low; you can see the answer in Settings.
What is sent
Nothing. The site is static files. There are no cookies, no analytics, no fonts or scripts from
other sites, and no exchange-rate service. Every page carries a Content Security Policy with connect-src 'self', which tells the browser to block any connection to another
site. Bank statements are read in your browser tab; the file is never uploaded and not kept
after import. A statement password is used once and never saved.
Your control
- Export everything as a backup file, or your transactions as a CSV for spreadsheets.
- Restore a backup on another device, either replacing what is there or adding to it.
- Delete everything from Settings. Clearing this site's data in your browser does the same.
Because nothing is stored anywhere else, nobody else can recover your data either: keep a backup if you might want it back.
Hosting
The site is served by GitHub Pages, which, like any web host, sees the request for each page (your IP address and browser). It never sees what you enter. The code is open on GitHub .