Your data never leaves your browser.

No CSV content. Minimal counts.

When you drop a CSV or Excel file into the tool, the file is parsed and turned into a dashboard inside your browser. The file's contents are never sent to any server. There is no "upload" step.

• ·

  No account, login, or required email

  There is no signup. Using the public tool does not ask for an email address or user identifier. If you choose to contact us, the separate email interaction includes the sender address and content you send.

• ·

  Cookie-free first-party audience measurement

  We count page views and approximate unique viewers without Google Analytics or another analytics vendor. The request contains only the page pathname and a coarse source channel such as direct, organic search, social, referral, or internal navigation. It never includes CSV contents, filenames, headers, cell values, or generated results.

• ·

  Our own storage stays local

  Theme, notice, optional workspace, saved-recipe, and audience opt-out preferences use browser storage on your device. The audience counter does not send those values. It checks only whether this browser has opted out.

• ·

  No copy of your data

  The CSV or Excel file you drop is never sent over the network. You can verify this by opening DevTools → Network and watching: dropping a file should produce no requests.

What loads from elsewhere.

For full transparency, here's everything the page fetches from a third party. None of it sees the CSV file you drop into the tool.

• ·

  Google AdSense

  We display advertisements served by Google AdSense (publisher ID ca-pub-6352806306420887). AdSense and its partners may use cookies and similar technologies to serve relevant ads and measure their performance. This is how the site stays free. You can manage your ad personalization at adssettings.google.com, and review Google's ad policies at policies.google.com/technologies/ads. AdSense does not see your CSV content — it only knows the page URL and standard request headers.

• ·

  Self-hosted fonts and application code

  Fonts, React, SheetJS and our application code are served from csvtodashboard.com. They do not require a third-party code or font CDN.

• ·

  How our audience count works

  csvtodashboard.com sends its own endpoint the normalized page pathname and one coarse source category. On the server, the network address and browser user-agent already present in the HTTP request are converted immediately into a one-way HMAC signature using a private key. The raw address, raw user-agent, raw referrer, URL query, and URL hash are not written. Daily records are deleted after 35 days; rolling reports use the latest 28 days and hide path cohorts with fewer than five anonymous signatures.

Email only what you choose.

The support, sponsor, and hosted workflow inquiry pages open your email application. An email sends the address, message, and attachments you choose through your email provider. Do not attach CSV files, credentials, personal data, or confidential source data to an initial inquiry. A hosted workflow inquiry does not change the public tools: they remain client-side, and no hosted service exists until a separate written scope explains security, retention, access, pricing, and data handling.

Consent + your rights.

Under GDPR (EU/UK) and CCPA (California), advertising cookies require informed consent or an opt-out. Google AdSense participates in the IAB Transparency & Consent Framework and will show its own consent prompt where required, respecting your choice — including limited or no ad personalization.

You can:

• Turn off first-party audience counting for this browser with the control above
• Opt out of personalized ads at adssettings.google.com
• Opt out of third-party cookies in your browser settings
• Use an ad blocker if you prefer no ads at all — the tool works fully without them
• Clear all locally-stored preferences by clearing site data for csvtodashboard.com in your browser

The audience counter honors Do Not Track, Global Privacy Control, and the browser opt-out above. It stores no account or raw identifier; its one-way signatures expire after 35 days. If you email us, your address and message are handled through the email provider and may be kept as needed to answer, secure, or document the request. You can ask us to correct or delete that correspondence, subject to legal or security retention needs. For AdSense-collected data, exercise your rights through Google directly.

Questions?

Email hello@csvtodashboard.com with anything about this policy or how the tool handles data. Do not attach CSV files, credentials, personal data, or confidential source data to an initial message.