Privacy Policy

Last updated: August 4, 2026

The early access list

Pacecraft isn't open to sign-ups yet, so for most visitors this list is the only thing this site collects. If you ask for early access, we store the email address you typed, the date you typed it, the page you came from, and the country code Cloudflare attaches to the request. That last pair exists so we can tell genuine interest from a script filling in forms.

The address is used for exactly one thing: telling you when Pacecraft opens up. It is not added to a newsletter, not sold, not shared, and not used to advertise to you anywhere. Reply to any email from Pacecraft asking to come off the list and the record is deleted.

Addresses on this list are held by Cloudflare, which serves this site. Everything below describes the app instead, and applies once you have an account.

What data we collect

Your email address

Your email address is your Pacecraft account. You give it when you sign up, and you sign in by clicking a one-time link we send to it — there is no password, so we never store one and there is none to be stolen from us.

We use the address for three things, and nothing else:

• Sending you the sign-in links you ask for
• Account and billing notices, including before your trial ends
• Your budget reports, if you turn them on

It is not added to a newsletter, not sold, not shared, and not used to advertise to you anywhere. Changing it in Settings changes where sign-in links go and immediately invalidates any link already sent to the old address.

Your YNAB data

Pacecraft accesses your YNAB (You Need A Budget) data through the official YNAB API using OAuth authorization. Connecting YNAB is a separate step after signing up, and your Pacecraft account continues to exist whether or not a YNAB account is connected to it. When you connect one, we access:

• Your YNAB user ID (to know which budget belongs to your account)
• Budget categories and their budgeted amounts
• Transactions for the current month

We only request read-only access to your YNAB data. Pacecraft cannot modify your YNAB budget.

Emailed reports

Pacecraft can email you a summary of your budget categories on a schedule you choose. This is off unless you turn it on, and it is sent to your own account email address only — there is no way to have us email it to anyone else, so we never hold an address belonging to someone who is not a Pacecraft user. Every report links back to the page where you can change the schedule or switch it off.

How we use your data

Your YNAB data is used solely to:

• Calculate spending pace and projections for your budget categories
• Display budget analysis and visualizations
• Sync and cache your budget data locally for faster access

How we store and secure your data

Your data is stored in a secure PostgreSQL database. OAuth access tokens and refresh tokens are stored encrypted at rest. We use HTTPS for all communications.

We cache your YNAB categories and transactions locally to provide a responsive experience. This cached data is refreshed hourly and whenever you trigger a manual sync.

Data retention

Your synced YNAB data is retained as long as your account is connected. Transaction data is limited to the current month. When you disconnect your YNAB account, all synced data (categories, transactions, sync metadata, and saved category groups) is immediately and permanently deleted.

Your report schedule is kept until you change it or delete your account.

Payments

Subscription payments are processed by Paddle, acting as merchant of record. Paddle collects and handles your payment details directly; Pacecraft never sees or stores your card information. We store only the resulting subscription status.

Third-party sharing

Your data will never be sold, shared with, or passed to any third party. We do not aggregate, analyze, or resell your financial data.

Data deletion

You can delete everything at any time from the Settings page.

• Disconnect your YNAB account — immediately and permanently removes stored tokens, cached categories, transactions, sync metadata and saved category groups. Your Pacecraft account itself remains, so you can still manage or cancel a subscription, and you can connect a YNAB account again later.
• Delete your account — ends any subscription immediately and erases everything above plus your email address, your report settings and your sign-in sessions. This cannot be undone and we keep no backup you can be restored from.

If you would rather we did it, or you can no longer sign in, email help@programmingjosh.com and we will delete your data on request.

Cookies and tracking

Pacecraft uses only essential session cookies required for authentication. We use no advertising or third-party tracking cookies, and nothing here follows you to other sites.

This marketing site counts page views using Cloudflare Web Analytics. It sets no cookies, stores nothing on your device, and builds no identifier or profile that could recognise you on a return visit or anywhere else. It tells us which pages get read and roughly where visitors arrived from, and nothing that identifies you. It is the only third-party script this site loads, and there are no third-party fonts or images. The Pacecraft app itself carries no analytics at all.

Contact

If you have questions about this privacy policy or want to request data deletion, email help@programmingjosh.com.