Privacy
Last updated 2026-09-15.
Tijori is self-hosted
There is no Tijori company or Tijori server collecting your data. Whoever deploys this software - you, or someone you trust - runs their own copy, on their own database, on their own domain. This page describes what the software itself does with data; it can’t speak for a specific deployment’s operator, who is whoever controls that box.
What’s encrypted before the server sees it
Card numbers, balances, merchant names, notes, and every other sensitive field are encrypted client-side (AES-256-GCM) with a key derived from your passphrase (Argon2id + HKDF) before they’re sent. The server stores ciphertext it cannot decrypt. See /security for the full model.
What’s not encrypted
Your email address (needed to sign in), card nicknames, issuer/network/statement-day metadata, and the fact that you have an account are stored as plaintext - this is what lets the app compute cycles and dates without your data ever leaving your device decrypted. None of it is sold, shared, or used for advertising, because there is no third party in this picture to share it with.
Cookies
One session cookie (httpOnly, Secure) and one CSRF token cookie. Both are strictly functional - keeping you signed in and protecting mutating requests. No tracking or advertising cookies, no analytics scripts, no third-party fonts or CDNs loaded into the page.
Optional integrations
Signal notifications can optionally be sent via Telegram, Web Push, or SMTP email, if the operator has configured them. Each is opt-in per user in Settings, and every channel no-ops cleanly when unconfigured. Using one means that specific message (e.g. a due-date reminder) passes through that provider - Telegram’s or your email provider’s systems, not Tijori’s, since there isn’t one.
Deleting your data
Deleting a card removes it after a 24-hour grace window, then hard-deletes it; an audit entry of the deletion event itself is retained (never its contents). There is no password/passphrase reset - losing both your passphrase and recovery phrase means your encrypted data is unrecoverable, including to whoever operates the box it’s on.