Skip to contentSkilloop
Get started

Trust

Security at Skilloop

Skilloop is small and we like it that way. That gives us a real shot at keeping the attack surface tight, the dependencies up-to-date, and your data locked down.

How we protect your data

Encrypted in transit

Every request to Skilloop is served over HTTPS (TLS 1.3). Sign-in cookies carry the Secure and HttpOnly flags; they are never readable from page JavaScript.

Encrypted at rest

Application data is stored in Convex, which encrypts data at rest on managed infrastructure (AWS) using AES-256. Backups inherit the same encryption posture.

Stripe handles payment credentials

Skilloop never touches your card number, CVV, or expiry. All payment forms are served by Stripe Checkout or Stripe Elements — Skilloop is fully out of PCI scope.

Minimized data collection

We collect only what we need to run the product. We do not run advertising trackers, we do not sell your data, and we delete accounts within 30 days of a verified deletion request.

Human-reviewed experts

Every expert on Skilloop has been manually reviewed before activation. Listings are scanned for spammy or misleading content; the marketplace is moderated continuously.

Found a vulnerability?

We take responsible-disclosure reports seriously. Email skilloop96@gmail.com with a clear description and reproduction steps. We aim to acknowledge within 2 business days and ship a fix within 30 days for confirmed issues.

Please do not test vulnerabilities against live learner or expert accounts. Use a test account, and we'll coordinate end-to-end proof-of-concept testing with you directly.

Keeping your own account safe

  • Sign in with a unique password and turn on two-factor authentication if your sign-in provider supports it (most do).
  • Never share your sign-in link or password with anyone, including people claiming to be Skilloop staff.
  • Use Skilloop's in-platform chat for session coordination — don't move to off-platform messaging where we can't help.
  • If anything feels off — a message, a request, a charge — contact skilloop96@gmail.com and we'll investigate.