Privacy Policy

Last Updated: February 23, 2026

🔒 Your Privacy Guarantee

Your files never leave your browser
No server uploads or cloud storage
Privacy-friendly analytics (no personal data)
No tracking cookies
Full GDPR compliance
You control all your data

1. Introduction

Welcome to CSV Studio ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your data. This Privacy Policy explains how CSV Studio handles your information.

2. Our Local-First Architecture

CSV Studio operates entirely in your browser. This is the cornerstone of our privacy commitment:

  • Your files never leave your device - All data processing happens locally in your browser
  • No server uploads - We do not upload, transmit, or store your CSV files on our servers
  • No cloud storage - Your data is stored in your browser's IndexedDB (local storage only)
  • Complete data control - You can delete all data by clearing your browser storage

3. Data We Do NOT Collect

CSV Studio does NOT collect, process, or store:

  • Your CSV files or any file contents
  • The data within your pipelines or transformations
  • Personal information from your files
  • User-generated content or project data
  • Passwords or authentication credentials (currently no authentication)

4. Data We May Collect

We use privacy-friendly analytics to improve the product. The following anonymized data may be collected:

  • Usage statistics - Page views, feature usage (e.g., "Quick Run used"), anonymous session data
  • Technical information - Browser type, screen resolution, operating system
  • Performance metrics - Page load times, error rates (no personal data attached)
  • Aggregated metrics - Number of projects created, pipelines executed (counts only, no content)

Important: Analytics data is collected using privacy-friendly tools (Plausible Analytics) that:

  • Do not use cookies
  • Do not track individual users across sessions
  • Are fully GDPR compliant
  • Do not sell or share data with third parties

5. How Your Data is Stored

Local Storage (Your Browser)

  • IndexedDB - All your projects, pipelines, and settings are stored in your browser's IndexedDB
  • localStorage - Preferences and UI state (e.g., theme, onboarding completion)
  • Browser cache - Application code and assets for offline functionality

This data persists on your device until you:

  • Clear your browser storage
  • Delete specific projects within the app
  • Uninstall the application (if using PWA)

6. Cookies

CSV Studio uses minimal essential cookies:

  • No tracking cookies - We do not use cookies for tracking or advertising
  • Session cookies - Only for maintaining your session (if authentication is added in the future)
  • Preference cookies - To remember your settings (theme, language)

7. Third-Party Services

CSV Studio may integrate with the following third-party services:

Analytics (Optional)

  • Plausible Analytics - Privacy-friendly, GDPR-compliant analytics
  • No cookies, no personal data collection
  • Data processing: EU servers only

Error Monitoring (Optional)

  • Sentry - Error tracking for bug fixes
  • Only error messages and stack traces (no user data)
  • Anonymized session IDs

8. Data Security

We implement industry-standard security measures:

  • HTTPS encryption - All communications are encrypted in transit
  • Content Security Policy (CSP) - Prevents XSS attacks
  • Input validation - All user inputs are sanitized
  • No server-side storage - Eliminates server breach risks
  • Dependency monitoring - Regular security updates

9. Your Privacy Rights (GDPR)

If you are in the EU/EEA, you have the following rights:

  • Right to access - You can export all your project data from the app
  • Right to deletion - Clear browser storage or delete individual projects
  • Right to portability - Export projects as JSON files
  • Right to object - Opt-out of analytics via browser settings or ad blockers
  • Right to withdraw consent - Disable cookies in your browser

Since your data is stored locally in your browser, you have complete control over it at all times.

10. Children's Privacy

CSV Studio is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

11. International Data Transfers

Since all data processing happens in your browser, there are no international data transfers of your file data. Analytics data (if enabled) may be processed in the EU by Plausible Analytics.

12. Data Retention

Your local data: Stored indefinitely in your browser until you delete it

Analytics data: Aggregated and anonymized, retained for 24 months

Error logs: Retained for 90 days for debugging purposes

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

  • We will update the "Last Updated" date at the top
  • Material changes will be announced in the app
  • Continued use of CSV Studio constitutes acceptance of changes

14. Contact Us

If you have questions about this Privacy Policy or how we handle your data:

  • Email: privacy@csvstudio.app
  • Use the Feedback button in the app
  • GitHub: github.com/csvstudio/issues (if open-source)

This Privacy Policy is effective as of February 23, 2026. By using CSV Studio, you agree to this Privacy Policy.