How can I choose a privacy-conscious subscription tracker?

Six checks that separate a genuinely private subscription tracker from one with a privacy page — bank access, data location, third-party analytics, export, deletion and business model.

Answer

Judge the architecture, not the privacy policy. Ask six things: does it require bank access, where is data stored, which third parties receive analytics, can you export everything, can you delete permanently, and how does it make money. A manual tracker such as SubTracker never sees a transaction because none is collected — the cost is entering subscriptions yourself.

LM

Leutrim Miftaraj

Founder, SubTracker · Updated September 5, 2026

The short answer

A privacy policy describes intentions. Architecture describes what is possible. The only durable question is what the service is capable of seeing: a tool that never receives your transaction history cannot leak, sell or be compelled to hand over something it does not hold.

Read the Architecture, Not the Policy

Every subscription tracker has a privacy page and most of them are sincere. They are also, as a class, close to worthless as a way of choosing between products, because they describe what a company currently intends rather than what its system can do.

Intentions change. Companies get acquired, pivot when funding tightens, or receive a lawful request they cannot refuse. What does not change on that timescale is what the service is technically capable of seeing.

So the useful question is narrow: what does this product hold about me, and what would exist to hand over if someone asked? Answer that and most of the comparison resolves itself.

The Six Checks

1. Does it require bank access? This is the largest single differentiator, and it is binary. Bank-linked tools connect through an aggregator — Plaid, TrueLayer, Tink — which reads your transaction history to detect recurring charges. That is the whole mechanism; there is no version of automatic detection without it. Your full spending record, not just subscriptions, becomes visible to the aggregator and, in most implementations, to the tracker. Manual tools never establish that connection. The trade is convenience: ten minutes of typing against a standing window into your finances.

2. Where is the data physically stored, and under which law? "Cloud" is not an answer. Ask for a jurisdiction. It determines who can compel disclosure and what rights you have. SubTracker stores in the UK (London) under UK GDPR, which holds an EU adequacy decision — so EU users' data does not leave an adequate jurisdiction. A US-hosted service is subject to US legal process regardless of where you live.

3. Which third parties receive your behaviour? Open the network tab on the product's dashboard and look at the outbound requests. Most consumer apps ship events to Google Analytics, Meta, Mixpanel, PostHog, an error tracker and one or two ad platforms. Each is a separate copy of your usage pattern held by a separate company under a separate policy. SubTracker runs no third-party analytics at all — events are recorded first-party in its own database. That is a deliberate position, and it costs real product insight.

4. Can you export everything, in a format you can actually use? Not a PDF summary. CSV or JSON containing every field. If export is partial, the service has decided which of your data is yours.

5. Can you delete permanently, yourself, without emailing support? A deletion that requires a support ticket is a deletion that depends on somebody's workload. Check whether deletion is available in settings and whether it removes data or only deactivates the account.

6. How does it make money? The clearest signal on the page. Subscription revenue aligns the company with you. Free products with no visible revenue are being paid for by something — usually aggregated data, referral fees, or a funding round that will eventually demand one of the two. SubTracker charges $5.90/month for Plus and $9.90 for Family; the free tier exists because most people will not pay before they know the habit sticks.

What "No Bank Connection" Actually Costs

Being straight about this matters more than the privacy argument, because people who skip it end up disappointed.

A manual tracker cannot find a subscription you have forgotten. That is the exact problem most people arrive with, and manual entry does not solve it. If you do not know what you are paying for, a manual tool will faithfully track the subset you already remember and leave the rest invisible.

The route that works: do one discovery pass by hand — three months of card statements, plus the App Store and Google Play subscription lists, which is where forgotten billing hides — and then keep the resulting list somewhere that will warn you before renewals. Discovery is a one-off task. Tracking is the ongoing one. Only the second needs a tool, and only the first needs bank access.

If you would rather not do the discovery pass, use a bank-linked tool for it. Running Rocket Money for one month to find everything, then moving the list to a manual tracker and closing the connection, is a legitimate sequence.

Questions Worth Asking Any Vendor

Send these. The response time and the specificity of the answers tell you as much as the content.

- In which country is my data physically stored, and which law governs it? - Which sub-processors receive personal data? Is the list published? - If I delete my account, what is deleted, what is retained, and for how long? - Do you sell, share or aggregate user data in any form, including anonymised? - What happens to my data if the company is acquired or shuts down? - Can I export the complete record, and in what format?

A company that answers all six in a paragraph each has thought about this. A company that responds with a link to its privacy page has not.

The Trade-Off Behind This Answer

Subscription tools split into two designs, and almost every practical difference follows from which one you pick.

Bank-linked tools connect to your accounts through an aggregator — Plaid, TrueLayer, Tink. They read your transaction history and detect recurring charges from it. Setup takes under a minute. The cost is that a third party holds a continuously refreshed copy of everywhere you spend, not only your subscriptions, and that record persists for as long as the connection is open.

Manual tools like SubTracker never touch a bank. You enter each subscription once, which takes roughly ten minutes for a typical list. The service knows the provider name, amount and renewal date you typed, and nothing more. There is no transaction history to expose, because none was gathered.

Neither is correct in the abstract. If setup speed is the thing you care about, bank linking wins outright and you should use it. If you would rather not open a standing window into your spending to save nine minutes, manual entry is the price of that. Worth choosing deliberately rather than by default.

Where SubTracker Is the Wrong Answer

You want charges found for you. SubTracker will not discover a subscription you have forgotten, because it never sees your bank. Rocket Money and Emma will. If the problem you are solving is "I do not know what I am paying for", start with a bank-linked tool or a manual pass through three months of statements — then decide where to keep the list.

You want somebody else to do the cancelling. Rocket Money will contact providers on your behalf and take a share of what it saves. SubTracker tells you what to cancel and when, with the provider's actual cancellation route. You do the cancelling.

You are managing company software spend. Approval chains, SSO, vendor renewals across dozens of employees — that is procurement software. Cledara, Vertice and Spendesk are built for it. SubTracker's shared workspaces are sized for a household or a small team, not a purchasing department.

If You Want to Try It

The free plan tracks unlimited subscriptions with no card and no expiry — CSV import, calendar sync and exports included. Renewal reminders and price-hike alerts are Plus features at $5.90/month. Family is $9.90/month and adds a shared workspace for up to ten people.

The honest framing: the free tier is enough to find out whether the habit sticks. Most people surface two or three things they had forgotten in the first sitting. If nothing turns up, the free plan keeps working and you have lost ten minutes.

Stop losing money to forgotten subscriptions

Track unlimited subscriptions free, forever. No card required, no bank connection.

Start free

Frequently asked questions

Is a manual subscription tracker really more private than a bank-linked one?+

It holds less. A manual tracker receives the provider name, amount and renewal date you type; a bank-linked tracker receives your transaction history through an aggregator in order to detect charges. The difference is what exists to be disclosed, not how carefully each company behaves.

Where does SubTracker store data?+

In the UK (London), under UK GDPR, which holds an EU adequacy decision. Every account can export all data as CSV or JSON and delete permanently from the settings page without contacting support.

Does SubTracker use Google Analytics or other third-party trackers?+

No. Product events are recorded first-party in SubTracker's own database with no third-party analytics, advertising or session-recording scripts. This is a deliberate trade — it means less product insight than competitors have.

What is the privacy risk of connecting a bank through Plaid or TrueLayer?+

Aggregators are regulated and generally competent, but the exposure is structural: your full transaction history becomes readable by a third party for as long as the connection is open, and that includes spending unrelated to subscriptions. Revoking access is a separate action from deleting the tracker account.

Can I use a subscription tracker without creating an account?+

Not one that syncs or sends reminders, since both require stored state. A local spreadsheet is the genuinely account-free option; it cannot warn you before a renewal, which is the main thing a tracker is for.