I want to assure you that this extension respects your privacy and data security. I am committed to maintaining the highest standards of security and privacy.
Security by design
Reviewed across three browser platforms
MM-Tweaks and its updates are submitted through the official review processes for Google Chrome, Mozilla Firefox, and Apple Safari.
No third-party APIs or libraries
The extension does not rely on ANY third-party APIs, libraries, add-ons, analytics, or tracking code, other than what is developed by Monarch Money itself.
Monarch-only access with no background process
The extension requests access only within Monarch Money's application domain and has no background process. Its work occurs while you are using Monarch Money.
How to verify this
Verifiable permissions and background activity
You can independently review MM-Tweaks in Google Chrome:
- Open Chrome’s Extensions page.
- Select Manage extension for MM-Tweaks.
- Review the Permissions section.
The Permissions section displays None or contains no entries. This confirms that MM-Tweaks does not request additional browser API permissions.
Chrome lists a background page or extension service worker separately when an extension includes one. MM-Tweaks does not include a background page or service worker. Its work runs only while you are using Monarch Money within Monarch Money’s application domain.
No data sent to third parties
MM-Tweaks does not transmit your data to third-party servers. Data remains between your browser and Monarch Money's servers.
How to verify this
Verifiable browser access
You can independently review the extension’s declared access in your browser:
- Open your browser’s Extensions page.
- Select MM-Tweaks.
- Open Details or Permissions.
- Review its site access.
MM-Tweaks declares access only to https://app.monarchmoney.com. It does not request access to all websites or any unrelated third-party domain. It also does not request optional access to additional websites.
Browser permissions are enforced by the browser. Chrome, Firefox, and Safari also review the packaged extension submitted to their respective extension stores.
MM-Tweaks does not include analytics, advertising, tracking, or third-party data services. It does not send your financial information to me or to another third party. Data used by MM-Tweaks remains within your browser and your interaction with Monarch Money’s servers.
Security and Privacy
MM-Tweaks uses Monarch Money’s GraphQL API (Application Program Interface), the same single data endpoint integrated into Monarch’s web and mobile applications. It works with the security token already stored by Monarch Money, using the access method Monarch designed for its application.
While MM-Tweaks is running, it makes additional requests to Monarch’s API and presents the resulting information within the Monarch Money web app. MM-Tweaks does not request information that identifies you, and the API does not expose your passwords, account numbers, or bank credentials.
MM-Tweaks requests only the data and access needed for its features. Its manifest requests no permissions beyond Monarch Money’s application domain, and the extension has no background process. Your financial information remains within its intended boundaries: your browser and Monarch Money.
MM-Tweaks follows the same API and browser-store distribution model used by Monarch Money’s own Retail extensions. It contains no third-party API or library. The extension has been available for over two years, and I am a moderator in the Monarch Money Reddit community.
Every update is submitted for review by Google for Chrome, Mozilla for Firefox, and Apple for Safari before it is made publicly available. These review processes help identify potential security issues and vulnerabilities in the packaged extension.
Data Collection and Modification
Your browsing experience is completely private and unaffected by data collection. This extension does not collect, store, or transmit any user data. This extension does not modify, update or delete any of your Monarch Money data.
Data Usage and Tracking
The extension does not send or receive data from third-party servers. We do not implement any analytics, tracking, or data collection mechanisms.