✓Your files never leave your browser
✓No server uploads or cloud storage
✓Privacy-friendly analytics (no personal data)
✓No tracking cookies
✓Full GDPR compliance
✓You control all your data
1. Introduction
Welcome to CSV Studio ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your data. This Privacy Policy explains how CSV Studio handles your information.
2. Our Local-First Architecture
CSV Studio operates entirely in your browser. This is the cornerstone of our privacy commitment:
- •Your files never leave your device - All data processing happens locally in your browser
- •No server uploads - We do not upload, transmit, or store your CSV files on our servers
- •No cloud storage - Your data is stored in your browser's IndexedDB (local storage only)
- •Complete data control - You can delete all data by clearing your browser storage
3. Data We Do NOT Collect
CSV Studio does NOT collect, process, or store:
- ✗Your CSV files or any file contents
- ✗The data within your pipelines or transformations
- ✗Personal information from your files
- ✗User-generated content or project data
- ✗Passwords or authentication credentials (currently no authentication)
We use privacy-friendly analytics to improve the product. The following anonymized data may be collected:
- •Usage statistics - Page views, feature usage (e.g., "Quick Run used"), anonymous session data
- •Technical information - Browser type, screen resolution, operating system
- •Performance metrics - Page load times, error rates (no personal data attached)
- •Aggregated metrics - Number of projects created, pipelines executed (counts only, no content)
Important: Analytics data is collected using privacy-friendly tools (Plausible Analytics) that:
- •Do not use cookies
- •Do not track individual users across sessions
- •Are fully GDPR compliant
- •Do not sell or share data with third parties
5. How Your Data is Stored
Local Storage (Your Browser)
- •IndexedDB - All your projects, pipelines, and settings are stored in your browser's IndexedDB
- •localStorage - Preferences and UI state (e.g., theme, onboarding completion)
- •Browser cache - Application code and assets for offline functionality
This data persists on your device until you:
- •Clear your browser storage
- •Delete specific projects within the app
- •Uninstall the application (if using PWA)
CSV Studio uses minimal essential cookies:
- •No tracking cookies - We do not use cookies for tracking or advertising
- •Session cookies - Only for maintaining your session (if authentication is added in the future)
- •Preference cookies - To remember your settings (theme, language)
CSV Studio may integrate with the following third-party services:
Analytics (Optional)
- •Plausible Analytics - Privacy-friendly, GDPR-compliant analytics
- •No cookies, no personal data collection
- •Data processing: EU servers only
Error Monitoring (Optional)
- •Sentry - Error tracking for bug fixes
- •Only error messages and stack traces (no user data)
- •Anonymized session IDs
8. Data Security
We implement industry-standard security measures:
- •HTTPS encryption - All communications are encrypted in transit
- •Content Security Policy (CSP) - Prevents XSS attacks
- •Input validation - All user inputs are sanitized
- •No server-side storage - Eliminates server breach risks
- •Dependency monitoring - Regular security updates
9. Your Privacy Rights (GDPR)
If you are in the EU/EEA, you have the following rights:
- •Right to access - You can export all your project data from the app
- •Right to deletion - Clear browser storage or delete individual projects
- •Right to portability - Export projects as JSON files
- •Right to object - Opt-out of analytics via browser settings or ad blockers
- •Right to withdraw consent - Disable cookies in your browser
Since your data is stored locally in your browser, you have complete control over it at all times.
10. Children's Privacy
CSV Studio is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.
11. International Data Transfers
Since all data processing happens in your browser, there are no international data transfers of your file data. Analytics data (if enabled) may be processed in the EU by Plausible Analytics.
12. Data Retention
Your local data: Stored indefinitely in your browser until you delete it
Analytics data: Aggregated and anonymized, retained for 24 months
Error logs: Retained for 90 days for debugging purposes
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make changes:
- •We will update the "Last Updated" date at the top
- •Material changes will be announced in the app
- •Continued use of CSV Studio constitutes acceptance of changes
If you have questions about this Privacy Policy or how we handle your data:
- •Email: privacy@csvstudio.app
- •Use the Feedback button in the app
- •GitHub: github.com/csvstudio/issues (if open-source)
This Privacy Policy is effective as of February 23, 2026. By using CSV Studio, you agree to this Privacy Policy.