Privacy Policy

LF Transactions Desktop App • Last updated: October 8, 2026

1. Purpose

LF Transactions is a Windows desktop app for capturing LoyalFans statements in built-in account profiles, reviewing and exporting saved records, and uploading eligible transactions to your Track Transactions account. It also requests customer information from that signed-in Tracker account when you use the app's client views.

2. Data used

• Statement dates, types, descriptions, gross amounts, commission, net earnings and customer identifiers.
• The visible LoyalFans client handle when you request linked Tracker history.
• The configured Tracker URL, selected profile count and appearance preferences.
• Your app-specific Tracker device connection and the normal LoyalFans website sessions created inside the app.

3. Local storage and uploads

Captured rows are stored in a local SQLite database. LoyalFans profiles retain separate persistent website sessions within the app, separate from Chrome and other desktop apps. The PIN lock controls app access; it does not encrypt the SQLite database or the entire browser profile.

The app remembers a scoped Tracker device credential in a PIN-encrypted vault additionally protected by Windows credential storage. Your PIN and Tracker password are never stored as plaintext; the PIN is not sent to Tracker. The password is sent over HTTPS during full sign-in, and short-lived importer access credentials then renew automatically. Full sign-in is needed after sign-out, device revocation, account-access changes or 90 days of connection inactivity. No personal LF importer key, Chrome ID or direct database credentials are entered by hand.

Use Upload reviewed rows to send eligible completed records matching your review filters to Tracker over HTTPS. Capturing alone saves statement rows locally. CSV exports remain on your computer.

4. Built-in browser access

Each LoyalFans profile has its own stored website session. Capture reads statement pages in the chosen profile or a worker using that same profile's session. Website sign-in and capture take place inside the desktop app.

5. Your controls

• App > Lock now: Closes account windows and requires the PIN again. Computer inactivity for five minutes, sleep and Windows locking also lock the app. Work already sent to Tracker may finish; no further app requests are authorised while locked.
• Sign out and lock app / App > Sign out of this device: Revokes this app's remembered Tracker connection and removes its local credential vault. Sign-out needs an online connection; saved transaction history and LoyalFans profiles are retained.
• Forgot PIN / sign in again: Full Tracker sign-in replaces the PIN and device connection without deleting transaction history. For the same Tracker account and address, the previous device credential is revoked during replacement. If the vault was damaged or you switched accounts, disconnect any unused old entry in Tracker Settings.
• Profile controls: Choose one to four LoyalFans profiles in Settings. Clearing a source profile's cookies signs that profile out.
• Show local database: Opens the location of your saved SQLite records. Back up local data before deleting the app's Windows data folder or moving computers.
• Release files: Saved app data is outside the extracted release folder. Deleting that release folder alone does not erase your captured records or saved sessions.

6. Contact

If you have any questions regarding this policy or LF Transactions, please reach out via your Transaction Tracker administrator or project repository.