Skip to content

Security: RobertParesi/Monarch-Money-Tweaks

Security

SECURITY.md

Monarch Money Tweaks - Security & Privacy Policy

I want to assure you that this extension respects your privacy and data security. I am committed to maintaining the highest standards of security and privacy.

Security and Privacy

This extension utilizes the public Monarch Money GraphQL API (Application Program Interface) for single endpoint data access in Monarch Money. This is their own API integrated into their web app, mobile apps and retail shopping extensions. The extension uses this same security token stored by Monarch Money, guaranteeing it's using the same methods (token & API) for accessing your data in the way they designed.

When this extension runs, it makes additional calls to their API using their Security Token and adds additional functionality to the Monarch Money web application. Their API does not expose your passwords, account numbers or bank credentials.

This extension is designed to request only the data and permissions necessary for their functionality. The extension's manifest requests no permissions beyond access within Monarch Money's application domain and has no background processes at all, ensuring that your financial information remains secure and confined within its intended boundaries - you and Monarch.

This extension follows the same API and distribution platform as the Monarch Money Retail extensions. It does not use any third-party API or third-party library. It has been around for over two years now and I am a moderator in the Monarch Money Reddit community forum.

⭐ Finally, this extension undergoes a thorough verification process by Google (Chrome), Mozilla (Firefox), and Apple (Safari) with every update. Prior to being made available to the public, it is carefully reviewed by these platforms to identify potential threats and vulnerabilities, ensuring the extension's safety and security.

Data Collection and Modification

Your browsing experience is completely private and unaffected by data collection. This extension does not collect, store, or transmit any user data. This extension does not modify, update or delete any of your Monarch Money data.

Data Usage and Tracking

The extension does not send or receive data from third-party servers. We do not implement any analytics, tracking, or data collection mechanisms.

There aren't any published security advisories