Youneedabudget.com - App.youneedabudget.com

date: Sat, 17 Jan 2026 16:06:42 GMT
content-type: text/html; charset=utf-8
location: https://app.youneedabudget.com/users/sign_in
cache-control: no-cache
content-security-policy: upgrade-insecure-requests; base-uri 'self'; default-src 'self'; child-src 'self' app.ynabassets.com app-maintenance.ynabassets.com help.ynab.com help.youneedabudget.com support.ynab.com support.youneedabudget.com wellness.ynab.com wellness.youneedabudget.com *.kustomer.help https://accounts.google.com/gsi/ content.googleapis.com api.recurly.com js.stripe.com hooks.stripe.com cdn.plaid.com widgets.moneydesktop.com www.youtube-nocookie.com www.youtube.com ynab://* solve-widget.forethought.ai https://www.ynab.com/eg-gtm; connect-src 'self' *.api.kustomerapp.com cdn.kustomerapp.com https://accounts.google.com/gsi/ *.pndsn.com https://analytics.ynab.com api.amplitude.com api2.amplitude.com sr-client-cfg.amplitude.com https://experiments.ynab.com api.recurly.com api.stripe.com api.rollbar.com browser-intake-datadoghq.com api.ynab.com cdn.jsdelivr.net/npm/ cookie-cdn.cookiepro.com geolocation.onetrust.com help.ynab.com help.youneedabudget.com kustomer-prod2-attachments.s3.amazonaws.com m.castle.io privacyportal.cookiepro.com s3.amazonaws.com/kustomer-prod1-attachments sdk.iad-03.braze.com support.ynab.com support.youneedabudget.com wellness.ynab.com wellness.youneedabudget.com ynab-production-evergreen.s3.amazonaws.com customer-loyddpjksb0o2y3b.cloudflarestream.com app.ynabassets.com https://user-images.ynabassets.com/ ; font-src 'self' data: cdn.kustomerapp.com fonts.gstatic.com cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/; frame-ancestors 'self'; img-src 'self' blob: data: *.getcloudapp.com *.giphy.com *.gravatar.com appboy-images.com cdn.kustomerapp.com cdn.kustomerhostedcontent.com cookie-cdn.cookiepro.com kustomer-prod1-attachments.s3.amazonaws.com kustomer-prod2-attachments.s3.amazonaws.com ynab-production-evergreen.s3.amazonaws.com braze-images.com https://user-images.ynabassets.com/; manifest-src 'self'; media-src 'self' blob: app.ynabassets.com customer-loyddpjksb0o2y3b.cloudflarestream.com; script-src 'self' https://accounts.google.com/gsi/client atrium.mx.com cdn.amplitude.com cdn.kustomerapp.com solve-widget.forethought.ai cdn.plaid.com cdn.rollbar.com cookie-cdn.cookiepro.com js.recurly.com js.stripe.com apis.google.com 'wasm-unsafe-eval' https://www.ynabassets.com/assets/ynab-hawker-v3.js 'nonce-8f5hu9zVZfcsIpQUNhLntQ=='; style-src 'self' 'unsafe-inline' https://accounts.google.com/gsi/style fonts.googleapis.com js.recurly.com cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/; worker-src 'self'; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub38e4fa6a7aacc9486a49bc8aa991fd48&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env%3Aproduction%2Cservice%3Aynab-api%2Cversion%3A26.8.4-hotfix
heroku-connect-time: 0.528
heroku-desired-backends: 5
heroku-dyno-id: b674d22d-ee68-4810-bd6e-643ba9b8322d
heroku-dyno-name: web.4
heroku-router-availability-zone: us-east-1f
heroku-router-instance-name: router.2410002
heroku-sid: va02
nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
report-to: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=MrajqHsWA0purP0zmHG%2BwCHM8Jq%2BnwHVzKrIuUWvFv4%3Du0026sid=af571f24-03ee-46d1-9f90-ab9030c2c74cu0026ts=1768666002"}],"max_age":3600}
reporting-endpoints: heroku-nel="https://nel.heroku.com/reports?s=MrajqHsWA0purP0zmHG%2BwCHM8Jq%2BnwHVzKrIuUWvFv4%3D&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&ts=1768666002"
server: cloudflare
set-cookie: _ynab_api_session=q291qCSdIWi6bv6E2UW5FFJjDkOuP7z8OblImw565sfaIMi6ndI%2BGlEcaAw%2BobfTE6k2ZualjZbyXlnOviib%2F06YSFsKgmlPbUQYR%2BCZPjjgjxuWNLOR27rzXz6ffJ2ytB3hlXver4txLnXouSxmBO4AQ0gLiSCYgqWMYEqJUZUC3yv0q107qF66LKsuGbsOkdqLRfPTjFUpvt5BgRtg5D4LhyDk--5yYGt70E31NbTKZL--LwXNcPf6K8awJpBMrGzPnA%3D%3D; path=/; secure; httponly; samesite=lax
strict-transport-security: max-age=63072000; includeSubDomains
via: 2.0 heroku-router
x-request-id: 4cd175c2-326b-b947-3f25-e74322e89667
x-runtime: 0.002185
cf-cache-status: DYNAMIC
cf-ray: 9bf719f06b1503d8-FRA

HTTP/2 200 
date: Sat, 17 Jan 2026 16:06:42 GMT
content-type: text/html; charset=utf-8
cache-control: no-store
content-security-policy: upgrade-insecure-requests; base-uri 'self'; default-src 'self'; child-src 'self' app.ynabassets.com app-maintenance.ynabassets.com help.ynab.com help.youneedabudget.com support.ynab.com support.youneedabudget.com wellness.ynab.com wellness.youneedabudget.com *.kustomer.help https://accounts.google.com/gsi/ content.googleapis.com api.recurly.com js.stripe.com hooks.stripe.com cdn.plaid.com widgets.moneydesktop.com www.youtube-nocookie.com www.youtube.com ynab://* solve-widget.forethought.ai https://www.ynab.com/eg-gtm; connect-src 'self' *.api.kustomerapp.com cdn.kustomerapp.com https://accounts.google.com/gsi/ *.pndsn.com https://analytics.ynab.com api.amplitude.com api2.amplitude.com sr-client-cfg.amplitude.com https://experiments.ynab.com api.recurly.com api.stripe.com api.rollbar.com browser-intake-datadoghq.com api.ynab.com cdn.jsdelivr.net/npm/ cookie-cdn.cookiepro.com geolocation.onetrust.com help.ynab.com help.youneedabudget.com kustomer-prod2-attachments.s3.amazonaws.com m.castle.io privacyportal.cookiepro.com s3.amazonaws.com/kustomer-prod1-attachments sdk.iad-03.braze.com support.ynab.com support.youneedabudget.com wellness.ynab.com wellness.youneedabudget.com ynab-production-evergreen.s3.amazonaws.com customer-loyddpjksb0o2y3b.cloudflarestream.com app.ynabassets.com https://user-images.ynabassets.com/ ; font-src 'self' data: cdn.kustomerapp.com fonts.gstatic.com cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/; frame-ancestors 'self'; img-src 'self' blob: data: *.getcloudapp.com *.giphy.com *.gravatar.com appboy-images.com cdn.kustomerapp.com cdn.kustomerhostedcontent.com cookie-cdn.cookiepro.com kustomer-prod1-attachments.s3.amazonaws.com kustomer-prod2-attachments.s3.amazonaws.com ynab-production-evergreen.s3.amazonaws.com braze-images.com https://user-images.ynabassets.com/; manifest-src 'self'; media-src 'self' blob: app.ynabassets.com customer-loyddpjksb0o2y3b.cloudflarestream.com; script-src 'self' https://accounts.google.com/gsi/client atrium.mx.com cdn.amplitude.com cdn.kustomerapp.com solve-widget.forethought.ai cdn.plaid.com cdn.rollbar.com cookie-cdn.cookiepro.com js.recurly.com js.stripe.com apis.google.com 'wasm-unsafe-eval' https://www.ynabassets.com/assets/ynab-hawker-v3.js 'nonce-pHXLkVzIJDwFdAPlK71Lvg=='; style-src 'self' 'unsafe-inline' https://accounts.google.com/gsi/style fonts.googleapis.com js.recurly.com cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/; worker-src 'self'; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub38e4fa6a7aacc9486a49bc8aa991fd48&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env%3Aproduction%2Cservice%3Aynab-api%2Cversion%3A26.8.4-hotfix
heroku-connect-time: 0.526
heroku-desired-backends: 5
heroku-dyno-id: b674d22d-ee68-4810-bd6e-643ba9b8322d
heroku-dyno-name: web.4
heroku-router-availability-zone: us-east-1f
heroku-router-instance-name: router.2410002
heroku-sid: va02
link: </assets/application-f3dbca96ca27858b258efbe551b4bd0d9e0dc25c4d97b75cf96525eeb6662693.css>; rel=preload; as=style; nopush,</assets/packs/js/runtime-796f5ca3e9ae363a70db.js>; rel=preload; as=script; nopush,</assets/packs/js/692-9c1dfda28a67a79373df.js>; rel=preload; as=script; nopush,</assets/packs/js/418-6d029bc76026b00b6703.js>; rel=preload; as=script; nopush,</assets/packs/js/519-bede6b13438d1b131f28.js>; rel=preload; as=script; nopush,</assets/packs/js/956-58d5003c1127c1a73975.js>; rel=preload; as=script; nopush,</assets/packs/js/576-1f9708e509b8fc9ce887.js>; rel=preload; as=script; nopush,</assets/packs/js/891-744bba7ff4a5bb66a12f.js>; rel=preload; as=script; nopush,</assets/packs/js/960-b2c1100206f0e2e0044a.js>; rel=preload; as=script; nopush,</assets/packs/js/504-2ff8a3de1ba006ca876a.js>; rel=preload; as=script; nopush,</assets/packs/js/924-91e0d383aad6ba2d8f0e.js>; rel=preload; as=script; nopush,</assets/packs/js/208-36672ca9e884e8f3cec2.js>; rel=preload; as=script; nopush
nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
referrer-policy: strict-origin-when-cross-origin
report-to: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=MrajqHsWA0purP0zmHG%2BwCHM8Jq%2BnwHVzKrIuUWvFv4%3Du0026sid=af571f24-03ee-46d1-9f90-ab9030c2c74cu0026ts=1768666002"}],"max_age":3600}
reporting-endpoints: heroku-nel="https://nel.heroku.com/reports?s=MrajqHsWA0purP0zmHG%2BwCHM8Jq%2BnwHVzKrIuUWvFv4%3D&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&ts=1768666002"
server: cloudflare
set-cookie: _ynab_api_session=zeWfbbRZ4DucV4e1wyv7CVrDVOonWl6%2BhokNJWU85FXAfJfv8eBiRkqpKxHllU7%2BR%2FC8c81ugUjY5M7IXEoRIOoJdH3mIvm8O1kqYrcwqkyP2Qq31FZuygXZp5ZgBuxaKPjefjv%2Ft%2BgxxOrUczSyyyVgc%2BRogENmT9DazB5cAmYnmYoegC8%2FOctuJP34y2jAejkZt%2BN6mR1SCOWgVT8Ax5CNeS1iDeW7tQK1nbQsM73JNXw5XHFC%2BC9B%2B8nz%2FHdcklblo7VcTGxiv0IllZQso4KmxJT7wk80WP5qWvqaWptUzh%2ByzN7TpuDpxVBaBKw2Sc%2BZvzo%3D--ry4zO2hX%2F21yof46--imDjGUgYtDEr69OC8nrfug%3D%3D; path=/; secure; httponly; samesite=lax
strict-transport-security: max-age=63072000; includeSubDomains
vary: Accept,Accept-Encoding
via: 2.0 heroku-router
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-request-id: e1f5e1bd-be86-94e2-9e05-841c28bc4b5a
x-runtime: 0.014895
x-xss-protection: 0
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 9bf719f27c7c03d8-FRA