v2.1.0

Your currency choice now follows you to every browser, share links stay off until you turn them on, and sign-in is harder to probe.

⚡ Improvements

• The currency you pick in Settings is now saved on your account, so every browser and device uses it. A currency you'd already chosen in one browser is copied to your account the first time you sign in there.
• Share links are off until you turn them on in Settings → Share with Turn on sharing. The new Turn off sharing button stops the links straight away, and the public pages show "not found". Turning sharing on again creates new links; the old ones never work again.

🐛 Fixes

• Fixed sign-in timing revealing which usernames exist: unknown usernames now take as long to check as wrong passwords.
• Fixed passwords longer than 72 bytes being accepted when anything past the 72nd byte was ignored. Setting up the admin account and changing your password now refuse them.
• Fixed data you'd viewed staying in the browser's offline cache after you signed out or your session expired. The cache is now cleared.

🌍 Translations

• The new sharing on/off text is available in English, Spanish, French, and Portuguese.

🏗️ Infrastructure

• A database migration adds the account currency. It runs automatically on startup.
• Updated a build-only dependency (serialize-javascript) to fix a security advisory.

📚 Documentation

• The README now has screenshots.

📝 Good to Know

• If you upgrade with sharing already on, your current links keep working. New installs start with sharing off.
• A JWT_SECRET_KEY shorter than 32 characters now logs a warning at startup. The app still runs. To replace the key, generate a new one with python -c "import secrets; print(secrets.token_hex(32))". Changing it signs everyone out.