Privacy
Last updated 11 September 2026.
Worthog is run from the United Kingdom and is the data controller for everything described here. In short, Worthog stores your figures so you can view them. It does not share or sell your data, use it for advertising or build a profile about you. You can export or delete your data at any time.
What Worthog stores
- Your email address, and a hashed form of your password. The password itself is never stored and cannot be recovered from the hash.
- The account names, groups and balances you type in, along with the date of each snapshot. Balances are stored as whole pence.
- Whether you have asked for a reminder when a snapshot is due, and the due date the last reminder was about.
- Session records, so you stay signed in, and so “sign out everywhere” can work.
Worthog does not connect to your bank or import anything from a financial institution. It does not ask for or store account numbers, sort codes or card details.
What Worthog does not store
Worthog uses no analytics, advertising, tracking pixels or third-party scripts. Its content security policy prevents your browser from loading content from another origin. Worthog does not build a profile about you or share, sell or disclose your data to another company.
Cookies
Worthog uses one cookie to keep you signed in. It is marked HttpOnly and SameSite=Lax and is sent only over HTTPS. There is no cookie banner because Worthog uses no optional cookies.
Why Worthog stores it
- To provide the service you signed up for. In UK GDPR terms, performance of a contract.
- To email you a link confirming your address, or one to reset your password. Also performance of a contract, and a necessary part of keeping the account secure.
- To email a reminder when a snapshot is due. This is consent, is off unless you switch it on, and can be switched off again in Settings at any time.
Who processes it
Two companies handle data on the service’s behalf, under contract, and for no purpose of their own:
- Netlify hosts the site, runs its server code and holds the database.
- Resend delivers the confirmation, password reset and reminder emails. It receives your email address and the contents of those messages, and no balances.
Both are United States companies, so they may process your data outside the UK. These transfers use the UK international data transfer addendum to the EU standard contractual clauses.
How long Worthog keeps it
Worthog keeps your data for as long as your account exists. If you ask us to delete it, we permanently remove your account and ledger without a recovery period. Export a copy first if you want to keep one. The hosting provider overwrites its backups on its own schedule, measured in weeks rather than years.
Your rights
Under UK GDPR, you can ask for a copy of your data, have it corrected or erased, object to or restrict how it is used, and withdraw consent for reminder emails. You can export your data as JSON or CSV and turn reminders off at any time in Settings.
To have your account and its ledger erased, or for anything else, email hello@worthog.app from the address you signed up with. Erasure is done by hand, within 30 days and usually within a few. If you are not happy with the response, you can complain to the Information Commissioner’s Office.
Security
Worthog encrypts traffic in transit and the database at rest, and hashes passwords with scrypt. The application and database restrict every read and write to one signed-in account, so one account cannot reach another’s figures. No system is perfect, and Worthog is a small independent service, so consider that when deciding what to record.
Changes
If this notice changes in a way that matters, we will change the date at the top and email everyone with an account. For smaller corrections, we will only change the date.