Your information
We never
- Ask for your bank login
- Ask for card or account numbers
- Look at your payment names or amounts
- Show ads or sell your data
We keep
- Your name and email, and a photo if you add one
- The payments you enter, readable only by your budget's members
- A record of activity, without payment names or amounts
Download your data, export your payments or delete your account whenever you like.
- Verdisium never connects to your bank. You enter only what you want to plan for.
- The people who run Verdisium can see account details such as your name and email, but not what your payments are or how much they are.
- The activity record (sign-ins, and when payments, budgets and members change) is kept for 400 days.
- Deleting your account removes it and the budgets only you belong to. Budgets you share stay with the other members.
Your account
Two-factor sign-in
A code from an authenticator app as well as your password.
Breached passwords refused
Passwords found in known data breaches can't be used.
A sign-in scripts can't read
Kept in a secure cookie that page scripts can't touch.
- Turn on two-factor authentication under Account, Security.
- New passwords are checked with Have I Been Pwned. Only the first five characters of a hash are sent, never the password, and passwords are stored as one-way hashes.
- Your browser only ever talks to Verdisium, never straight to our database.
Behind the scenes
Every request is checked on its way to your budget.
- YouYour browser
- VerdisiumThe app
- Not too many attempts
- Signed in, email confirmed
- DatabaseWhere budgets live
- Two-factor done
- A member of this budget
- Role allows the change
- Who can see and change each budget is decided by the database on every request, not just hidden in the app. People only see budgets they've been invited to, with the role they were given.
- If you use two-factor, the database shows nothing until you've entered your code.
- Sign-ins, password resets and other sensitive actions are rate limited, which stops people guessing passwords.
The details are in our Privacy Policy and Terms of Use. Found a security problem? Please tell us through the Support page.