Legal
Last updated: 2026-06-24
LibreCord is a personal-finance tool for your own record-keeping. Please read these terms and the privacy notice below before relying on it.
Disclaimer
LibreCord is provided for informational and personal record-keeping purposes only. It is not financial, investment, tax, accounting, or legal advice, and nothing in the app should be taken as a recommendation to make any financial decision. Consult a qualified professional before acting on your finances.
The app is provided “as is” and “as available”, without warranties of any kind — express or implied — including accuracy, reliability, availability, or fitness for a particular purpose. Uptime is not guaranteed, and the service may change or be discontinued at any time.
Some figures rely on third-party data that may be delayed, incomplete, or incorrect — for example, cryptocurrency prices from CoinGecko and foreign-exchange rates from the fawazahmed0 exchange-api. These values are estimates and are not guaranteed.
To the fullest extent permitted by law, the operator of LibreCord is not liable for any loss or damage — including lost data or financial loss — arising from your use of, or inability to use, the app. You are responsible for verifying your own figures and for keeping your own records and backups (see Your data & backups below).
Privacy notice
What we collect
Your email address (used for your account, email verification, and password resets); your password, stored only as a one-way bcrypt hash (never in plain text); and the financial data you choose to enter — income, expenses, assets, debts, budgets, recurring items, your custom categories, and your preferences.
Where it is stored
Your data is held in a cloud-hosted MongoDB database (MongoDB Atlas).
How it is protected
Passwords are hashed with bcrypt. Sessions are kept in a sealed, encrypted, httpOnly cookie. In production the site is served over HTTPS (with HSTS) and sends standard security headers. No measure is perfect, but we aim to protect your data with reasonable, current practices.
Cookies
LibreCord sets a single session cookie (librecord-token) so you stay logged
in. There are no third-party tracking, analytics, or advertising cookies.
Third parties
An email provider (SMTP) receives your email address to send verification and password-reset messages. Price and exchange-rate lookups (CoinGecko and the exchange-api) send only tickers and currency codes — never your personal or financial data. The sign-up bot check (ALTCHA) is self-hosted and shares nothing with a third party.
We do not sell your data
Your financial data is never sold, rented, or shared for marketing, and is not used for any purpose beyond running the app for you.
Your rights
You can export everything at any time from Settings → Account & data → Export my data as a JSON file, and you can permanently delete your account and all of its records at any time from Settings → Delete account.
Contact
Questions about privacy or your data? Email contact@librecord.com.
Your data & backups
Because the disclaimer above means we can’t guarantee against data loss, we strongly encourage you to export your data regularly as your own backup. Head to Settings → Account & data → Export my data to download a complete JSON copy of your records whenever you like.
LibreCord is open source. A self-hostable version is available, so if you would rather keep full control of your data you can run your own instance. (A link to the self-hosted release will be added here once it’s ready.)