Privacy Policy
The short version
- Coffer is read-only. It shows balances, transactions and holdings, and it cannot move money or change anything at your financial institution.
- You choose what to share, on your institution’s own website, and you can stop sharing at any time.
- We never see your institution username or password.
- We do not sell your information or use it for advertising. We share it only with the service providers listed below and with tools you choose to connect.
1. Who we are
Coffer is a private financial data service operated by Don Hillsberry, doing business as Bouncing Pebbles (“Bouncing Pebbles”, “we”, “us”). This policy explains what information Coffer collects, how we use and share it, and the choices you have. It applies to the Coffer service and website. Access to Coffer is by invitation.
2. Information we collect
Information you ask your financial institution to share
When you connect an institution, you sign in on that institution’s own website and choose which accounts to share. The institution then shares the following with Coffer through Akoya, a data access network for financial institutions:
- account details: the account’s name or nickname, type and currency, and the last four digits of its account number;
- balances, including available balances where the institution provides them;
- transactions: the date, amount, description and type of each one, and the institution’s reference for it; and
- investment holdings: security name and symbol, quantity, price, market value and cost basis.
We keep only the last four digits of an account number. Coffer does not request your name, address, contact details or government identification numbers from your institution.
Connection credentials
Akoya issues Coffer a credential that allows read-only access to the accounts you approved. We never see, receive or store the username, password or security answers you use with your institution.
Sign-in information
Invited users sign in with a Google account. We receive the name and email address of that account, and our sign-in service records the time and IP address of each sign-in.
Messages you send us
If you email us, we receive your email address and whatever your message contains.
Technical records
Coffer records technical events, such as a connection being completed or a scheduled update running. It also keeps routine request logs showing the page requested, the time and the result. These records do not contain balances or transaction details, and query strings are removed from request logs.
Cookies
Coffer uses only the cookies it needs to work: a sign-in session cookie, and a cookie that confirms a new connection and expires after ten minutes. We do not use analytics, advertising or tracking cookies, and Coffer’s pages load no third-party scripts.
3. How we use information
We use information only to:
- provide Coffer to you: show your balances, transactions and holdings, and keep them current with a scheduled daily update;
- answer requests from tools you have authorized to use your Coffer information;
- keep Coffer secure, prevent misuse and fix problems;
- respond to your messages and requests; and
- meet our legal obligations.
We do not sell your information. We do not use it for advertising or marketing, to make credit or eligibility decisions, or to build profiles of you for anyone else. We do not use your financial information to train artificial intelligence models.
4. How we share information
We share information only in the ways described here.
Service providers
These companies help us run Coffer. Each receives only what its role requires.
| Provider | Role | Information involved |
|---|---|---|
| Akoya | Connects Coffer to your financial institution and delivers the information you approve | Your consent, when you last used Coffer, and the financial information in section 2 |
| DreamHost | Hosts the server in the United States that runs Coffer and stores its information | All information Coffer stores |
| Provides sign-in for invited users, and the mailbox for our contact addresses | Your name and email address, and messages you send us | |
| Cloudflare | Provides domain name services and routes email sent to our contact addresses | Messages you send us |
Tools you choose to connect
You can authorize software, such as an AI assistant, to read your Coffer information. For example, Anthropic’s Claude can connect through the Model Context Protocol. Coffer sends an authorized tool only the information it requests on your behalf. The tool’s provider handles that information under its own terms and privacy policy, which may differ from ours. You can withdraw a tool’s authorization at any time.
Your financial institution and Akoya
Because the connection runs through them, your institution and Akoya know that you connected Coffer. Their own privacy policies apply to that information.
Legal requirements and safety
We may disclose information when the law or valid legal process requires it, or when it is necessary to protect the rights, property or safety of our users, the public or us.
Business changes
If Coffer is transferred, for example to a company formed to operate it, information may transfer with it. The new operator must honor this policy, and we will tell you before the transfer happens.
5. How long we keep information
- Financial information is kept while your institution is connected, so Coffer can show your history. When you disconnect an institution or ask us to delete its information, we delete what was retrieved from it within 30 days. If you end access at your institution instead, Coffer receives nothing new, and what it already holds stays until you ask us to delete it.
- Connection credentials are deleted when an institution is disconnected.
- Sign-in and technical records are kept only as long as they are needed for security and troubleshooting.
- Messages are kept as long as needed to respond and to keep a record of what was asked and done.
- When your access to Coffer ends, we disconnect your institutions and delete your information within 30 days.
We may keep information longer where the law requires it. If that applies, we will tell you what we kept and why.
6. Your choices and rights
- Stop sharing. End access at any time in your institution’s connected-apps or data-sharing settings, or ask us to disconnect the institution.
- Get a copy. Ask for a copy of the information Coffer holds about you.
- Correct it. Financial information comes from your institution, so it is corrected there, and Coffer picks up the change at its next update. Tell us if something looks wrong.
- Delete it. Ask us to delete your information, and we will do so within 30 days, except where the law requires us to keep it.
To make a request, email privacy@bouncingpebbles.com. We respond within 30 days. To protect your information, we may ask you to confirm your identity, for example by writing from the email address you sign in with. Requests are free. These choices are available to every user, wherever you live, and using them will not affect how we treat you.
7. How we protect information
- Read-only access. Coffer requests read-only access and cannot move money, make payments or change your accounts.
- Encryption in transit. Every connection to Coffer uses HTTPS.
- Encrypted credentials. Connection credentials are encrypted before they are stored.
- Access control. Coffer is invitation-only. Connecting an institution requires signing in, and each tool must be authorized separately.
- Isolated systems. Coffer runs in isolated, unprivileged containers. Its database is not reachable from the internet, and administrative access requires cryptographic keys.
No method of storing or sending information is completely secure. If an incident affects your information, we will notify you without undue delay and as the law requires. Our Security page has more detail and explains how to report a concern.
8. Children
Coffer is not intended for anyone under 18, and we do not knowingly collect information from children.
9. Where information is processed
Coffer is operated from the United States, and the information it holds is stored in the United States.
10. Changes to this policy
When we change this policy, we will post the new version here with a new effective date. If a change materially affects how we use or share your information, we will email invited users before it takes effect.
11. Contact us
Questions or requests about privacy: privacy@bouncingpebbles.com. Security concerns: security@bouncingpebbles.com.
Coffer is operated by Don Hillsberry, doing business as Bouncing Pebbles.