Trust
Security and data handling
A straight answer to the question that matters for a finance or utility tool: where does my data actually go?
Last updated 29 August 2026
What each product stores
| Product | Account | Stays on your device | Stored by SkyCo | Third-party calls |
|---|---|---|---|---|
| CurrenSee | Not required | Favourite pairs and alert settings | Nothing personal | Market data provider for fiat and crypto rates |
| Chronos | Not required | Selected date and calendar preferences | Nothing personal | None for the core conversion, which is calculated in the browser |
| My Finance Friend | Optional, guest mode available | Guest session identifier | Email address and the portfolio entries you add, when signed in | Price data provider, and language processing to read your typed instruction |
| SkyCo Grocery Packs | Not required | Lists and check states you build | Nothing personal | None |
How data travels
- Every SkyCo site is served over HTTPS, so traffic is encrypted in transit.
- Data kept on your device lives in browser storage. Clearing site data in your browser removes it, and SkyCo cannot read it remotely.
- Where a product stores account data, it sits with a managed hosting provider with access rules that restrict rows to the account that owns them.
- Third-party requests carry only what the request needs, for example a currency pair or a ticker symbol.
Limitations I will not hide
- SkyCo is a one-person studio. There is no 24/7 on-call rota and no external security certification such as SOC 2 or ISO 27001. Nothing on this site claims otherwise.
- Products depend on third-party data providers. If a provider is down or rate limits a request, the product shows an error rather than a stale number presented as current.
- Guest data in My Finance Friend is tied to the device. Clearing browser data removes it and it cannot be recovered.
Reporting a vulnerability
If you find a security problem, email support@skyco.online with the steps to reproduce it. Please do not test against other people’s data or run disruptive scans. I aim to acknowledge reports within 72 hours and will credit you if you would like that.
Related
See the Privacy Policy for what is collected and the Status page for current product reachability.