Trust
Security and data handling
A straight answer to the question that matters for a finance or utility tool: where does my data actually go?
Last updated
What each product stores
| Product | Account | Stays on your device | Stored by SkyCo | Third-party calls |
|---|---|---|---|---|
| CurrenSee | Not required | Current pair while the page is open | Nothing personal | Frankfurter and CoinGecko and Nepal Rastra Bank |
| Chronos | Not required | Selected date while the page is open | Nothing personal | None, runs in your browser |
| My Finance Friend | Not required for the preview | Typed trade while the page is open | Nothing from the in-page preview | None, runs in your browser |
| SkyCo Grocery Packs | Not required | Pack and household size while the page is open | Nothing personal | None, runs in your browser |
How each tool works with your data
- CurrenSee: your amount stays in the page. The SkyCo server fetches the rate for the chosen pair and returns it; the amount itself is never sent.
- Chronos: the date conversion runs entirely in your browser using its built-in calendar support. No request leaves the page.
- My Finance Friend: the sentence you type is read by code in the page. It is not sent anywhere and disappears on refresh.
- Grocery Packs: the sample packs ship with the page. Ticks are saved per pack in this browser when storage is available. Household size resets on refresh.
- Support form: it only opens an email in your own mail app. SkyCo receives nothing unless you send that email.
How data travels
- Every SkyCo site is served over HTTPS, so traffic is encrypted in transit.
- Data kept on your device lives in browser storage. Clearing site data in your browser removes it, and SkyCo cannot read it remotely.
- The current five in-page experiences do not store account data. The finance preview shows a parsed entry but does not save it.
- Third-party requests carry only what the request needs, for example a currency pair or a ticker symbol.
Limitations I will not hide
- SkyCo is a one-person studio. There is no 24/7 on-call rota and no external security certification such as SOC 2 or ISO 27001. Nothing on this site claims otherwise.
- Products depend on third-party data providers. If a provider is down or rate limits a request, the product shows an error rather than a stale number presented as current.
- Refreshing resets unsaved entries. Grocery ticks and recent currency pairs remain in browser storage when available.
Reporting a vulnerability
If you find a security problem, email support@skyco.online with the steps to reproduce it. Please do not test against other people’s data or run disruptive scans. I aim to acknowledge reports within 72 hours and will credit you if you would like that.
Report a problem
Use the Support page for security reports. It helps to include the page address, what you did, what you expected, what happened instead, and your browser and device. Screenshots are welcome. Leave out passwords and private data.
Related
See the Privacy Policy for what is collected and the Status page for current product reachability.