Private by design

What is never asked for

Your broker stays yours

Sentryfolio never asks for your broker password and cannot log in as you anywhere. You export a file from your broker yourself, look at it yourself if you like, and hand over exactly that. There is no aggregator in the middle, no open-banking connection, no standing permission to reach into your accounts. The watch sees what you gave it and nothing else.

The invitation form asks for an email address and whatever you choose to write. That is the entire collection.

Where it lives

Your own vault

Your holdings live in your own vault on Sentryfolio's own server, hosted in the EU. Each invited portfolio is kept to itself: signing in shows you yours and nobody else's. Backups run nightly and are encrypted before they ever leave the server.

The people who can see your figures: you, and the operator who runs the machine. No third party is given them, and there is nothing on either site that would let one collect them.

This website

Nothing here watches you

This public site runs no analytics scripts, sets no cookies, and loads nothing from anyone else's servers: fonts, images and styles all come from Sentryfolio itself. The only counting is done afterwards, in aggregate, from the server's own 30-day log, and the report the operator reads masks addresses. No visitor profile exists to build.

The small print, kept honest

Checked by machines, too

The promises on this page are enforced in the site's own build: a test fails if a page ever loads a third-party resource, and retired claims are blocked from quietly returning. Security researchers have a standing address at /.well-known/security.txt.

Anything unclear, or anything you think this page gets wrong: say so, and it will be read personally.

Who runs this

One operator, named

Sentryfolio is run by one person: Phil, the private investor it was built for. There is no company behind it hunting growth, no investors to satisfy, and no plan that needs your data to be worth something. Every invitation, every message and every imported file is handled by the same pair of hands.

If it ever stood down

Your ledger is never a hostage

A one-person watch should answer the obvious question: what happens if it stops? Plainly: your figures are yours to take at any moment. Every table in the terminal downloads as a spreadsheet today, not on request. And if Sentryfolio ever wound down, the beacon would not simply go dark: notice would come first, with time to take your exports, and the vault would be deleted, not passed on.