Privacy
What Tratobor does with your data, in plain words. If anything here reads as evasive, that's our fault — write to us and we'll fix the wording.
Updated September 17, 2026
The short version
- • Your receipts, expenses and cards are yours — kept for you, shown to nobody else.
- • Receipt photos are read in memory and never written to disk.
- • Spreadsheets are parsed in your browser and thrown away — we don't keep the file.
- • Everything lives on our own server in Finland, in the European Union — and never leaves it.
- • We set no cookies at all: no analytics, no counters, no advertising trackers, nothing to consent to.
- • We don't sell your data and don't hand it to ad networks. Ever.
- • One button in Account deletes the account and everything it kept in sync.
Who runs Tratobor
Tratobor (tratobor.com) is run by its owner, an independent developer — Andrei Kramarenko. There is no company behind it and no team with access to your numbers. For anything about your data, use the contact form at the bottom of this page; that's the fastest way to reach a human, and it goes straight to the owner. Common questions — a sign-in email that never arrived, a receipt read wrong, deleting everything — are answered on the support page.
What we collect
Only what you bring yourself:
- Your email address — to sign you in. There is no password: we send a link and a code, and that's the whole account.
- What you put into the app — expenses, receipts and their line items, the cards you describe for cashback, categories and settings. If you are signed in, these are synced to your account so the same data shows up on your other devices.
- Your answers about shops in “My discounts”, if you press the button: “right” or “not right” about a shop's name and its discount. They travel without your name and without your account — the detail is in its own section below.
- Nothing else. No name, no phone number, no address, no bank credentials, no advertising identifiers. We never connect to your bank and never ask for its login.
Where it's kept
On our own server in Finland, inside the European Union — not a third-party analytics platform, not a data broker. Each row is tied to your account and readable only with your own sign-in token: other people signed in to Tratobor cannot see it.
A copy also lives in your browser, on the device you use, so the app keeps working offline. Clearing site data in the browser wipes that copy; signing in again pulls your data back from the account.
Receipt photos
A photo you take is sent to our server, read there, and dropped as soon as the request ends. The image is handled in memory and is never written to disk — we keep no album of your receipts. What stays is the text we got out of it: store, date, line items and prices, and only because that's the point of the app.
Reading a photo is not magic: lines get misread and prices get mangled. Check what came out and fix what's off.
Spreadsheets
A CSV, TSV or Excel file you import is parsed into rows and then discarded — the file itself never leaves your browser. Only the expenses you chose to import stay, the same way a manually typed expense would.
Reading a receipt photo
The only model in Tratobor reads the photo of a receipt, and it runs on our own server, next to everything else. Nothing is sent to an outside AI provider, and your data is not used to train anything. The image is turned into lines of text and then deleted.
There are no written AI tips in Tratobor: they were removed on 18 September 2026. Every number you see — categories, prices, inflation, matching receipts to expenses — is worked out by code in your own browser, and your expense rows are not sent anywhere.
Answers about shops and their discounts
In “My discounts” Tratobor tells you which chain has a loyalty card or a discount, and asks: “is that right?”. This is the one place where something travels from you to us not to work out your own numbers, but to make the database better for everyone. So here it is in detail.
It is sent only when you press the button, and only this:
- • the answer itself — “right” or “not right” — and what it is about: the match with an organisation, or its discount;
- • the organisation's id in our database and the merchant line as the till printed it (that is a shopfront name, not your data);
- • if you chose to correct us — the name you suggested, a percentage and a short note you wrote yourself;
- • the place selected in the section, and the date — the day only, no hour or minute;
- • a random browser marker, there for one purpose: so the same answer pressed twenty times stays one vote. It is not an account and not a person, and it is not tied to your email or your records.
What is not in that traffic: the amounts and dates of your purchases, the contents of receipts, your email address or account id — you can answer without signing in at all. Names of people from your transfers are never sent: a line like “transfer to J. Smith” is treated as personal spending and never asked about, and your note saying so stays in the browser. The server accepts exactly the fields listed above and silently drops everything else — it does not “clean up extras”, it takes only what is allowed.
Answers go to the server for your region (for tratobor.com — the one in Europe) and are pooled weekly: a correction becomes a candidate for a human to check once three independent people say the same, and a single answer changes nothing. The public database of organisations keeps the chain's name and the terms of its discount — and nothing about who told us.
Matching a receipt to a chain happens in your browser: the database of chains is downloaded to you, not your merchant lines uploaded to us. Part of that base comes from OpenStreetMap and is used under the ODbL licence — you will see the © OpenStreetMap contributors notice in the section itself.
Email, cookies and tracking
Sign-in emails are delivered through an email delivery service, which necessarily sees your address and the message. That is the only routine reason your address leaves our server.
About cookies, plainly, without the usual “we value your privacy”: Tratobor sets no cookies at all — not ours, not anyone else's, not even “strictly necessary” ones. What the app uses instead is your browser's own local storage and an IndexedDB database on your device: the key that keeps you signed in, your records, and your settings. All of it sits on your device, none of it follows you between websites.
There is no analytics, no visitor counter, no tracking pixel and no advertising anywhere in Tratobor. We don't know which page you came from and don't build a profile of you. That is also why you get no “manage your cookie preferences” wall: with nothing to track, there would be nothing for you to refuse, and a consent box that collects consent for nothing is theatre. The short note at the bottom of the screen simply says data is kept in your browser and points here.
The one third-party script on the site is an invisible Cloudflare Turnstile check, loaded only on the page with the contact form and only as you submit it; it may keep a value of its own in your browser. Clearing site data in your browser wipes all of the above at once.
What we never do
We don't sell your data, don't share it with ad networks or data brokers, and don't use it for scoring, credit checks or any decision about you. Tratobor is a calculator for your own spending, not a financial advisor.
Deleting your account
Open Account and press delete account. The account and everything synced to it are removed for good — we keep no backup copy to restore. The button next to it erases the local copy on the device you are holding.
Your rights (GDPR)
If you are in the European Union or the UK, you have the right to access your data, correct it, have it erased, take it with you in a machine-readable form, and object to processing. Most of it you can do yourself in the app: the data is in front of you, editable, and one button deletes it all.
For a copy of your data, a correction we can't do from the interface, or a deletion you'd rather we handle, use the form below — we answer within a month. If our answer doesn't satisfy you, you can complain to the data protection authority in your country.
The boring but required part. The controller is the owner named above, reachable through the form below. We process your data to provide the service you asked for — that is the contract you entered by using it (Art. 6(1)(b) GDPR); the abuse check on the contact form rests on our legitimate interest in not being spammed (Art. 6(1)(f)). There is no consent to withdraw because we ask for none: to stop the processing, delete your account. Your data is kept for as long as your account exists and is erased with it — we run no archive and keep no backup copy from which it could be restored. Your records, your receipts and the model that reads your receipt photos stay on our own server in Finland — none of that leaves the European Union. The two exceptions are the ones you can see: the service that delivers the sign-in email and the anti-abuse check on the contact form are ordinary providers that may process a request outside the EEA under the European Commission's standard contractual clauses. What they see is an email address and a message, never your spending. There is no automated decision-making or profiling with legal effect, and there is no data protection officer: Tratobor is one person and does not meet the threshold for one.
Security
Everything travels over HTTPS. Tokens don't end up in the address bar or in server logs, access to the server is restricted, and rows are readable only with the account's own token.
Changes
A new version is published on this page with its date. If something material changes, it will be stated here plainly.
Tratobor is an independent service, not affiliated with any bank or retailer. The analysis is informational and is not financial advice. Privacy questions go through the form below; it is protected from abuse by Cloudflare Turnstile, described in Cloudflare's Turnstile Privacy Addendum.