Your files stay on your computer
SpreadsheetFix cleans CSV and Excel files inside your browser. This page explains exactly what that means, what our servers do see, and how you can verify it.
Your file is processed in your browser
When you choose a file, your browser reads it from disk and SpreadsheetFix’s JavaScript parses and cleans it inside the page. The rows, cells and the file itself are never sent to our servers or to anyone else. The cleaned file is built in the page too and saved straight to your computer.
What reaches our server
When you download a cleaned file, the page tells our server its row count and which rules ran, so that plan limits can be applied. The file name stays in your browser, and the rules aren’t stored. If you’re signed in, we keep a count of today’s exports. For accounts we also store your email address and plan, and Stripe holds billing details. On Pro and Team, a preset you save is stored too: its name, rules and settings, including any column names you picked and any value you typed into a Filter Rows condition. Team plans add the member list, the email addresses of pending invites and an audit log of preset and membership changes.
Third parties
Clerk handles sign-in, and may show a Cloudflare bot check when you sign up, Stripe handles payments, and Resend delivers team invite emails (the invitee’s address, the team name and the join link); none of them receives anything from your files. Google Analytics loads only if you accept cookies, and records usage events such as file type, row count and number of changes, never cell contents or file names.
Enforced by the browser
Every page is served with a Content Security Policy that only lets the page connect to our own domain, Clerk, Stripe and Google Analytics. Pages can’t be framed by other sites, and access to the camera, microphone and location is switched off.
Check it yourself
Open your browser’s developer tools, go to the Network tab and clean a file. You’ll see the page load and, when you download, one small request to /api/entitlements with the row count and the rules that ran. There is no upload.
Where we are
SpreadsheetFix is based in the EU and GDPR applies. Details are in the privacy policy. Report a security issue to support@spreadsheetfix.com.