Ownership includes
your information.

One vault. On your computer.

The app keeps your catalog in a local encrypted vault, including its photos and documents. There is no Asset Manager account, hosted catalog, advertising or in-app tracking.

Installed builds use your per-user application directory. Portable Linux and Windows builds keep their data in AssetManagerData beside the app. There is no automatic cloud sync.

Encryption is part of the app.

SQLCipher encrypts the catalog database. Photos, documents and thumbnails use authenticated encryption. Your passphrase unlocks a randomly generated data key; your recovery key provides a separate way to unlock that same vault.

Argon2id

Derives a key from your passphrase and makes repeated guesses expensive.

XChaCha20-Poly1305

Encrypts attachments and checks for tampering.

HKDF-SHA256

Derives separate keys for the database, objects and thumbnails.

The implementation is open source. That makes it inspectable; it is not a claim of an independent security audit.

Network features are your choice.

Manual cataloging and valuations work offline. Optional price feeds contact external providers for metal prices, crypto prices or exchange rates. Watch-only Bitcoin balance lookups contact a balance provider when enabled.

Those providers can see your IP address and the identifiers you request. This can disclose an interest in an asset or associate an address with you. The app does not send the whole catalog to those providers.

Keep a backup. Keep the key.

An encrypted backup protects against losing a computer or damaging a vault. Keep a copy on another device, use the backup verification feature, and test recovery before you need it.

The recovery key is a credential, not a backup of your catalog. Store it safely, separately from the computer. Anyone who has it can unlock a compatible copy of the vault.

Know what encryption cannot do.

A compromised computer can expose data while the vault is open. A weak passphrase, unencrypted swap, printed reports, screenshots and deliberately exported files need their own care.

CSV exports, saved attachment copies and reports can contain private information in plaintext. Choose where you save them and who you share them with. Full-disk encryption provides an additional layer of protection.

A simple website, too.

This site does not include analytics, advertising, external fonts or tracking cookies. Help search runs in your browser and does not send your query to a search service. Screenshots show a fictional demo catalog, not anyone’s private vault.

Your browser requests these pages from the website’s host, which may keep ordinary server access logs. Download and source-code links take you to GitHub, where GitHub’s policies apply.