Settings, data and security
Settings
| Setting | What it does |
|---|---|
| Appearance → Theme | Light and dark themes, remembered across launches |
| Reporting → Currency | USD or CNY for every total; charges keep their own currency |
| Refreshing → Refresh interval | 6, 12, 24 (default) or 48 hours before a month is fetched again |
| Background | Open at login, background refresh, alert notifications |
| Demo data | Load or clear five sample accounts (AWS, Alibaba Cloud, DeepSeek, OpenAI, Anthropic) with twelve months of history |
Refresh fetches months older than the refresh interval; Force Refresh fetches them all and can incur provider charges. Neither overwrites an imported month. Demo accounts use a demo- prefix, carry no credentials and are skipped by refreshes.
Where the data lives
| Platform | Location |
|---|---|
| macOS | ~/Library/Application Support/CloudBridge/ |
| Windows | %APPDATA%\CloudBridge\data\ |
| Linux (source builds) | ~/.local/share/CloudBridge/ |
billing.duckdb— the billing ledger, with each charge's original currency;cloudbridge.duckdb— accounts, budgets, rules and alert state;raw/— every provider response and imported file, by source, account and month, so a mapping fix can re-read them without another request (Accounts → Replay normalization);inventory/andtools/— Insights scans and the scanner, if installed;config.json— currency, theme, refresh interval and background settings.
Backups
Quit CloudBridge before copying or opening its databases. Back up the whole directory — both databases, raw/ and config.json — and restore it with the app closed. Credentials are in the OS keyring, not in the backup; on another machine, enter them again. To analyse the ledger outside the app, query a copy rather than the live file.
Security
- Credentials are held in the OS keyring — macOS Keychain or Windows Credential Manager; Secret Service on Linux source builds — separate from the databases.
- The app uses a credential only for requests to the provider it belongs to. Using a key in CloudBridge does not make it read-only: see Provider permissions.
- There is no CloudBridge sync service and no telemetry. An import makes no provider request.
- Local does not mean encrypted. The app does not encrypt the ledger or raw files. Use disk encryption and protect your backups.
- Before sharing logs, screenshots or sample exports, redact credentials, account IDs, resource names and tags.