Security and privacy
Where your data lives
Budget Smugglers runs on one server in Sydney, behind a Cloudflare Tunnel, with no ports open to the internet.
The server#
Everything you put into Budget Smugglers is stored in one PostgreSQL database on a virtual server in Sydney, Australia, rented from Onidel, an Australian cloud provider. The app, the database and the backup job run there in separate containers.
The server:
- has no ports open for the app. Traffic arrives through an outbound-only Cloudflare Tunnel.
- only allows maintenance logins with an SSH key, from one address.
- installs security updates automatically.
- keeps the database on an encrypted disk.
Off-site backups are kept in Cloudflare R2 storage in the Asia-Pacific region.
How your browser reaches it#
Your browser talks to Cloudflare over HTTPS, and Cloudflare passes the request down the tunnel to the server. Like any CDN, Cloudflare handles the connection, so it could technically see traffic as it passes through. It doesn’t store your data. See third parties.
Who runs it#
Budget Smugglers is run by a small team in Australia. Every change goes through automated checks (tests, plus dependency and container scans) and a test copy of the app before it reaches the real one.
Dates and money#
Your data isn’t tied to where the server is. Each pool has its own time zone and currency, and dates are stored as plain calendar days, so travelling won’t shift a transaction to another day.