Security: how we protect your family’s money and data
Satelit encrypts store passwords with AES-256-GCM, never places orders for you, keeps each family’s data separate and lets you export or delete everything at any time. A money monitor has to be trustworthy before anything else. Below is exactly how we protect your data.
We never place orders for you
Store connections import your history, search prices and can fill your cart. They don’t send orders and don’t pay. You confirm the order yourself, in the store.
Store passwords are encrypted
Credentials and cookies for store accounts are encrypted with AES-256-GCM before they’re stored. They aren’t shown in the app, don’t appear in logs and are never sent to the AI assistant.
In the app you only see a masked form, such as the last three digits of a phone number.
Each family sees only its own data
Every request for data first checks that you belong to that family. There are no cross-family reads.
Roles (owner, admin, member, viewer) decide who can invite people, connect stores or change budgets.
Sessions under your control
Your session lives in a secure cookie (httpOnly, Secure, SameSite=Lax). In settings you can see your signed-in devices and end any session.
Requests that change data are protected against CSRF attacks.
Your data stays yours
Export all your data to a JSON file at any time. Delete your account in one place. Families where you were the only owner are deleted with it.
The public site doesn’t track you
satelit.md uses no advertising or tracking cookies. We only keep your language, theme and city, in your browser.
Found a problem?
Write to security@satelit.md. We reply quickly and will credit you publicly if you like.
Last updated: