Welcome to FX Skipper ("we", "our", "us"). FX Skipper is a free informational comparison platform helping users find money transfer and currency exchange services worldwide. We are committed to protecting your privacy under applicable global data protection legislation, including GDPR, UK GDPR, UAE PDPL, CCPA/CPRA, LGPD, PIPEDA, PDPA, PIPL, POPIA, Australia Privacy Act 1988, India DPDP Act 2023, Japan APPI, and South Korea PIPA.
The data controller for this service is FX Skipper. For all privacy-related enquiries: contact@fxskipper.com
When you visit FX Skipper we may process: your IP address (solely to detect your country and display relevant local exchange services, sent to ipwho.is, or geojs.io as a fallback, and not stored by us); browser/device info for service functionality; your language preference (stored in browser localStorage); your consent record (stored locally in localStorage, never transmitted). When you click a link to a provider we also record, without any personal identifier (no IP address, cookie or user ID), which provider, currency pair and page the click came from, so we can see which comparisons are useful. Some provider links are affiliate links: the provider or its affiliate network may set its own cookies once you reach their site, under their own privacy policy.
Site usage statistics (Google Analytics 4). We use Google Analytics to count visits and see which pages are useful. If you have chosen "Accept & Continue" in the consent box of our comparison app, Google Analytics sets cookies and receives the pages you view, your approximate location, browser/device information and a random identifier. If you chose "Essential Only", or have not chosen, analytics storage is switched off and Google receives only cookie-less technical pings.
Rate alerts (no account needed). If you create a rate alert on a corridor page we store: your email address; the currency pair and target rate you chose; whether you ticked the optional weekly email; the date and the version of the wording you agreed to; and the page you used. We first send you a confirmation link (double opt-in); nothing else is sent until you click it. We email you once when your target is reached and, only if you ticked the box, one email a week with the best live rate for that route. Every email has an unsubscribe link.
Account (optional). If you create an account we store your name, email address, a hash of your password (never the password itself), your plan, one-time verification and reset codes, a session token, and the rate alerts you create while signed in.
Advertising enquiries. If you use the contact form on the Advertise page we receive, by email, your name, company, email address, the country you serve and your message. The form does not store them in a database; the email sits in our mailbox and we use it only to reply to you.
Abuse prevention. To stop the sign-up forms being used to send spam we keep short-lived counters of attempts per IP address and per email address (as a one-way hash for rate alerts). They are not used for anything else.
| Purpose | Legal Basis (GDPR) | Legal Basis (UAE PDPL) |
|---|---|---|
| Detect country for relevant services | Legitimate interests (Art. 6(1)(f)) | Legitimate purpose (Art. 4) |
| Display live exchange rates | Legitimate interests (Art. 6(1)(f)) | Legitimate purpose (Art. 4) |
| Remember language preference | Consent (Art. 6(1)(a)) | Consent (Art. 5) |
| Store consent record | Legal obligation (Art. 6(1)(c)) | Legal obligation (Art. 4) |
| Send the rate-alert emails you asked for (confirmation, target reached, optional weekly email) | Consent (Art. 6(1)(a)) — withdraw any time | Consent (Art. 5) |
| Keep a record that you agreed (date, wording version) or unsubscribed | Legal obligation / legitimate interests (Art. 6(1)(c), (f)) | Legal obligation (Art. 4) |
| Reply to an advertising or business enquiry you send us | Steps at your request before a contract / legitimate interests (Art. 6(1)(b), (f)) | Legitimate purpose (Art. 4) |
| Measure how the site is used (Google Analytics cookies) | Consent (Art. 6(1)(a)) — withdraw any time | Consent (Art. 5) |
| Operate an optional account | Contract (Art. 6(1)(b)) | Contract / consent (Art. 5) |
| Prevent abuse of the sign-up forms | Legitimate interests (Art. 6(1)(f)) | Legitimate purpose (Art. 4) |
We use essential technical storage and, only if you choose "Accept & Continue", Google Analytics cookies (statistics). We do not use advertising cookies.
| Key | Type | Purpose | Expiry |
|---|---|---|---|
| mb_lang | localStorage | Language preference | Until cleared |
| mb_consent | localStorage | Privacy consent choice | Until cleared |
| mb_token | localStorage | Keeps you signed in (only if you create an account) | Until you sign out or clear it |
| _ga, _ga_GBN5HWS8Q8 | Cookie (Google Analytics) | Tells visits apart so we can count them. Set only after you choose "Accept & Continue". | Up to 2 years |
Google Analytics data is kept for the period set in our Analytics account (never longer than 14 months). You can change your choice at any time by clearing this site's data in your browser, or block Google Analytics with Google's opt-out browser add-on.
| Service | Purpose | Data Shared |
|---|---|---|
| ipwho.is / geojs.io | IP geolocation | Your IP address (transient, not stored by us) |
| open.er-api.com | Live exchange rates | None (public API) |
| Google Analytics 4 (Google Ireland Ltd / Google LLC) | Site usage statistics | Pages viewed, approximate location, browser/device information, a random identifier (cookies only after you accept) |
| Google Fonts | Typography | Your IP address (Google standard) |
| Hostinger (hosting, database, email sending) | Runs the website, stores rate-alert and account records, and sends our emails (processor acting on our instructions) | The data in 3.2, only if you create an alert or account |
Your IP may be processed by third-party services whose servers may be located outside your country or the EEA. Where required by applicable law, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent transfer mechanisms.
Language and consent preferences are stored only in your browser until you clear it. For data you give us:
EU/UK (GDPR): Right to access, rectification, erasure, restriction, portability, objection, and to lodge a complaint with your national supervisory authority.
UAE (PDPL): Right to be informed, access, rectification, erasure, withdraw consent, and lodge a complaint with the UAE Data Office.
California (CCPA/CPRA): Right to know, delete, opt-out of sale, non-discrimination, and correct personal information. (We do not sell data.)
Users in Canada, Australia, India, Singapore, South Africa, Japan, South Korea, China, Thailand, Brazil, and Malaysia also hold rights under their respective legislation. Contact contact@fxskipper.com to exercise any rights. You can withdraw consent for rate-alert emails at any time, in one step, with the unsubscribe link at the bottom of every email; withdrawing does not affect emails already sent.
FX Skipper is not directed at children under 16 (or 13 in the USA). We do not knowingly collect personal data from children. Contact contact@fxskipper.com if you believe a child has provided data.
We implement appropriate technical and organisational measures including HTTPS encryption. No internet transmission is completely secure.
We may update this Privacy Policy periodically. The "Last Updated" date will be indicated above. Continued use of FX Skipper after changes constitutes acceptance of the updated Policy.
FX Skipper – Data Protection
Email: contact@fxskipper.com
We aim to respond to all legitimate requests within 30 days.
This Privacy Policy is governed by applicable international data protection law. In the event of any conflict, the law of the jurisdiction in which the data subject resides shall take precedence regarding that data subject's rights.