Privacy Policy
/privacy- Lakeline is a private toolbox. Sign-up is closed; accounts are made by the person who runs it.
- Finance and Documents are stored in your account’s database, and only your account can read them.
- Vault passwords and documents are encrypted in your browser before upload. Without your master password or recovery key, nobody can read them, the operator included.
- PDF Tools work on your device. The PDFs you open there are not uploaded.
- No ads, no analytics, no tracking cookies, and your data is never sold.
- You can export your data, and ask for your account and everything in it to be deleted.
01Who runs Lakeline
Lakeline is a personal web app for money, documents and everyday tools. It is run by its owner (“the operator”, “we”). Public sign-up is turned off: the operator creates each account by hand, so everyone who uses Lakeline was invited.
This policy explains what Lakeline keeps about you, why, where it is stored and what you can do about it. It covers the sign-in page, Home, Finance, Documents, PDF Tools, Vault, Profile and Changelog.
02What Lakeline keeps
Your account
- Your email address and password. The password is handled by Supabase Auth and stored only as a hash; Lakeline never sees or stores it in readable form.
- The name and phone number you add in Profile, if you add them.
- When the account was created and when you last signed in.
What you put into the tools
- Finance: accounts and balances, transactions and their notes, categories, budgets, savings goals, subscriptions and bills, PayLater plans, and your Finance settings such as payday.
- Documents: pages, canvases, notebooks, tags, and the PDFs and pictures you upload.
- Vault: your passwords and personal documents, stored only in encrypted form (see Vault encryption). The database can see only each entry’s size and when it was created or changed.
- PDF Tools: nothing is sent anywhere. Signatures you save there stay in your browser. A result is stored only if you choose “Save to Documents”.
What Lakeline does not collect
No analytics, advertising or tracking scripts run in Lakeline. It does not record which pages you visit, does not build a profile of you, and does not use your data to train any model.
03How it is used
Your data is used only to run the features you use:
- to sign you in and keep you signed in on your devices;
- to save your work and sync it between your devices;
- to work out figures such as your budget per day, coming bills and PayLater instalments. These are calculated in your browser;
- to show notifications such as bills due soon, ending trials and Vault documents that need renewing. These are also worked out in your browser.
The operator does not read your content as part of running Lakeline. The operator would look at stored data only to fix a problem you report, to comply with the law, or with your permission. Even then, Vault contents stay unreadable.
04Where it is stored and who handles it
| Service | What it does |
|---|---|
| Supabase | Sign-in, the database for Finance, Documents and Vault, and private file storage for Documents and Vault files. Database rules (row-level security) let each account read and change only its own rows and files. |
| Google Fonts | Serves the Inter and JetBrains Mono typefaces. Your browser’s request includes your IP address and browser details. |
| jsDelivr | Serves code libraries such as the Supabase client and the PDF libraries. Requests include your IP address and browser details. |
These providers process data under their own terms and privacy policies. Supabase may store data in a region outside your country. Your data is not shared with anyone else unless the law requires it.
05Vault encryption
Vault is built so that the server stores only data it cannot read:
- Your master password is turned into a key in your browser with PBKDF2-SHA256 (600,000 rounds). That key unlocks a random vault key.
- Every password entry, document file and document detail is encrypted with the vault key using AES-256-GCM before it leaves your browser.
- Your master password and recovery key are never sent to Lakeline or Supabase. Only the encrypted vault key and the salt are stored.
If you lose both your master password and your recovery key, your Vault cannot be recovered by anyone, including the operator.
06What is kept in your browser
Lakeline uses your browser’s local and session storage, not cookies, for the following:
| Item | Why |
|---|---|
| Sign-in session | Keeps you signed in. It is removed when you sign out. |
| Finance copy | A copy of your Finance data, so pages open quickly and work offline until they sync. |
| Documents list | Titles and short previews of your notes, so lists and search open quickly. |
| Saved signatures | Signatures from PDF Tools. They exist only in this browser. |
| Preferences | Vault auto-lock time, document grouping, where you were in a page or canvas, and which release notes you have seen. |
| This tab only | “Hide amounts”, and an action you picked on another page, such as “Add transaction”. |
You can remove these at any time by clearing this site’s data in your browser settings. On a shared computer, sign out and clear site data when you’re done.
07Keeping and deleting
- Your data is kept for as long as your account exists, or until you delete it yourself.
- Notes you delete in Documents stay in Trash for 30 days, then are deleted for good.
- When your account is deleted, the database rows linked to it are deleted with it. The operator also removes the files you uploaded.
- Copies kept by Supabase in its routine backups expire on Supabase’s backup schedule.
08Your choices
- See and correct: everything you entered is visible and editable in the app. Your name, phone and password are in Profile.
- Export: transactions export to CSV in Finance, Finance settings has a backup, and documents and PDFs can be downloaded.
- Delete: delete single items in each tool, or ask the operator to delete your whole account.
- Object or ask: contact the operator with any question about your data. You may also have rights under the privacy law where you live, such as Indonesia’s Personal Data Protection Law (UU PDP).
09Security
Lakeline uses encrypted connections (HTTPS), database rules that keep each account’s rows private, private file storage, and in-browser encryption for Vault. No system is perfectly secure, so use a strong, unique password and a long master password. Keep your recovery key somewhere safe and offline.
10Children
Lakeline is not meant for children under 13. The operator does not knowingly create accounts for them.
11Changes to this policy
If this policy changes, the new version is posted here with a new date. Important changes are also announced in the Changelog and the notification bell.
12Contact
Questions about privacy or your data go to the operator, the person who created your Lakeline account. To ask for your account to be deleted, contact them the same way.