Private Ledger Vault — Personal Finance

Manager

Your Money, In Clear View.

A private, device-first financial cockpit for people who want one composed view of their money without giving up their data.

Manager combines the speed and simplicity of a device-resident ledger with optional zero-knowledge encrypted multi-device sync — no bank aggregators, no telemetry, no unencrypted uploads. Ever.

Zero Surveillance • Zero Bank Scraping • 100% Yours
Trust by Design

Privacy Isn't a Setting. It's the Architecture.

Unlike traditional fintech apps, Manager was engineered so that privacy violations are structurally impossible — not merely promised.

Guest Mode by Default

Zero registration, zero email, zero server communication. The entire ledger lives in your browser's local storage — calculations, charts, and reports run 100% on your device, and everything can be erased in one click.

Zero-Knowledge Encryption

When you opt into multi-device sync, your vault key is derived in your browser via PBKDF2-SHA-256 (250,000 iterations) and used for AES-256-GCM encryption. The key never leaves your device — the server only ever stores ciphertext.

Zero Trackers & Aggregators

No Plaid. No Yodlee. No MX. No telemetry, no analytics pixels, no data brokers. Manager never scrapes your bank credentials and has nothing to sell — because nothing is collected.

Built For

For People Who Take Their Money — and Their Privacy — Seriously

🛡️ Privacy Purists 🌍 Multi-Currency Nomads & Expats 🖥️ Self-Hosters & Indie Enthusiasts 📊 Intentional Budgeters 🔔 Subscription & Bill Hawks 📉 Spreadsheet Refugees Anyone Who Values Financial Privacy
Workspace Tour

12 Workspaces. One Financial Cockpit.

A sleek sidebar on desktop, a thumb-reachable bottom bar on mobile. Every part of your financial life has a dedicated, focused workspace.

1. Overview

Consolidated net worth, monthly pulse metrics, budget progress, and next-to-settle feed — with one-click privacy masking.

2. Transactions

Rapid entry, sub-millisecond in-browser search, granular filters, and inline tagging with up to 12 private tags.

3. Accounts

Bank, cash, credit cards, digital wallets, and foreign currency accounts across ~180 ISO currencies.

4. Budgets

Category and tag-scoped limits with pace indicators that shift from mint to warning to over-limit.

5. Bills

Due-date scheduling with smart month-end clamping, manual confirmation workflow, and bulk settlement.

6. Subscriptions

Cost normalization, renewal alerts within 7 days, and one-click cycle rollback for accidental payments.

7. Payment History

A permanent audit trail of every bill and subscription payment, linked to its generated transaction.

8. Templates

Manual-by-default blueprints for regular income and expenses — no phantom background transactions.

9. Wealth

Track stocks, mutual funds, gold, fixed deposits, crypto, and loans with automatic gain/loss calculation.

10. Analytics

Six-month cash flow momentum, category allocation donuts, and tag spending clouds — all client-side.

11. Settings & Data Vault

JSON backup & restore, RFC 4180 CSV export, printable PDF reports, and a custom rate matrix.

12. Account Security

TOTP 2FA with in-browser QR generation, anti-replay validation, and single-use backup codes.

Power Features

The Details That Make It a Vault

In-Browser CSV Importer

Files from any financial institution are parsed entirely in browser memory — the raw CSV never touches the server. Smart header detection, duplicate skipping, and preview validation before import.

Anti-Replay TOTP 2FA

Built-in two-factor authentication compatible with Google Authenticator, Aegis, 1Password, and Bitwarden. QR codes generated fully client-side — the secret never touches third-party APIs.

Storage Quarantine Recovery

If the browser crashes mid-write, Manager never overwrites your records. Corrupted data is automatically quarantined with a recovery banner to download the raw vault before resetting.

Optional AI Insights

A consent-first feature, strictly disabled by default. When you explicitly request it, only a minimized aggregate summary is sent — no account names, payees, notes, or raw transactions. Ever.

Security & Cryptography

Why the Server Can Never Read Your Ledger

Traditional fintech apps hold your balances in plaintext. Manager's two-derivation, two-salt architecture makes that impossible.

Traditional Fintech Apps

You hand over bank credentials to data aggregators
Servers read and store your plaintext balances
Your transaction history becomes the product

Manager — Private Ledger Vault

Your password is never sent — a key is derived in your browser via PBKDF2-SHA-256 (250,000 iterations)
Data is encrypted with AES-256-GCM before it leaves your device
The server stores only ciphertext and an Argon2id-hashed verifier — a full server compromise yields nothing readable

No Password Reset. By Mathematical Design.

Because your encryption key is derived from your password, a server-side reset would irretrievably destroy access to your ledger. Manager doesn't sell the illusion — it offers four honest recovery pathways instead:

Offline JSON backups

Encrypted password-hint reminders

Single-use 2FA backup codes

Previous-password re-encryption

How It Compares

Manager vs. Everything Else

Feature Manager Bank Apps YNAB / Monarch Spreadsheets
Privacy & data ownership 100% private Sells data Aggregator access Cloud-dependent
Guest mode (no sign-up) Yes Impossible Account required Account / license
E2E encrypted sync Zero-knowledge AES-256 Plaintext server-side Server decrypts Unencrypted drive
Multi-currency + manual rates ~180 currencies Single currency Clunky Manual formulas
Bills & subscriptions Full tracking + rollback Basic statements Present Manual
Tag-scoped budgets Category or tags Category only Category only Pivot tables
Local CSV import 100% in-browser Rarely supported Server upload Copy-paste
Self-hostable PHP / LAMP ready Proprietary SaaS only Local files
Recurring cost Zero fees Free via your data $100–150/year License fees
Deployment

Self-Host It in About 5 Minutes

Zero Composer dependencies, zero npm runtimes, zero build steps. Pure PHP 8.3+, MariaDB, and a lightweight .htaccess routing setup.

terminal

# CLI installer

php scripts/install.php

# Or open the guided web installer

https://your-domain.com/install.php

Native LAMP

Runs smoothly on a personal VPS, Raspberry Pi, home server, or shared LAMP stack with Apache or Nginx.

Guided Installer

CLI installer (scripts/install.php) or a step-by-step web installer at /install.php.

Powered By Modern Technology

PHP 8.3+ (strict types) MariaDB / MySQL Vanilla JS — zero build step AES-256-GCM PBKDF2 250k + Argon2id TOTP 2FA ~180 ISO 4217 currencies Frankfurter rate cache CSRF + HttpOnly sessions
FAQ

Common Questions

No — never. Manager does not connect to bank aggregators like Plaid, Yodlee, or MX, does not scrape financial credentials, and never uploads unencrypted financial data. You log transactions manually or import CSV files parsed entirely in your browser.
Yes. Guest mode is the default: zero registration, zero email, zero server communication. Your entire ledger lives in your browser's local storage and can be erased in one click. A registered account is only needed for optional multi-device encrypted sync.
Your vault key is derived in your browser via PBKDF2-SHA-256 with 250,000 iterations and used for AES-256-GCM encryption. The key never leaves your browser. A separate authentication verifier is hashed server-side with Argon2id. Even a fully compromised server holds only ciphertext that mathematically cannot be decrypted.
Because the encryption key is derived from your password, a server-side reset would destroy access to your ledger — so Manager doesn't pretend otherwise. Recovery paths include offline JSON backups, encrypted password-hint reminders to a verified email, single-use 2FA backup codes, and re-encrypting with your previous vault password after an authorized credential change.
Yes. Manager is built on pure PHP 8.3+ with MariaDB/MySQL and zero Composer or npm dependencies. Deploy on a native LAMP stack via the CLI installer or the guided web installer — typically running in under five minutes.
Anytime. Export a complete JSON vault backup in plain or encrypted portable format, a standards-compliant RFC 4180 CSV of your transactions, or generate printable PDF reports directly from your browser's print engine. No lock-in.

Take Back Control of Your Financial Ledger Today

Zero surveillance. Zero bank scraping. 100% yours. Start in guest mode, sync privately when you want to.