Privacy Policy

Last updated: July 20, 2026

The short version: your spreadsheet is processed locally in your browser. We collect minimal, anonymous first-party usage events to measure app performance and utility. We never collect or transmit your spreadsheet data, filenames, or cell contents.

1. Your spreadsheet files

All scanning and deterministic cleaning happen in your browser using JavaScript running on your device. Your spreadsheet contents are not transmitted to SheetSanitizer servers for analysis, and we operate no server that receives them.

2. Product usage analytics

To understand feature adoption and improve the app, SheetSanitizer collects minimal, anonymous first-party event telemetry (such as when a file is selected, when a scan finishes, or when a cleaned file is downloaded). Each event payload contains only an event name, a temporary random session identifier generated in memory per page load, and a timestamp. We never collect spreadsheet contents, row data, column names, cell values, filenames, or user identities in analytics. Telemetry is sent directly to our first-party endpoint using sendBeacon. We use no third-party analytics services or tracking cookies.

2. Optional AI features (bring your own key)

If you explicitly use an AI-assisted transformation, the selected column data (in small batches) is sent directly from your browser to the AI provider you choose (OpenAI, Anthropic, or Google), using your own API key. We never receive your API key or that data. Filenames, license keys, and your identity are not included in AI requests. The provider's own privacy policy applies to that data.

3. Data stored in your browser

License key (localStorage) — so you stay activated on this device.
A clock high-water mark (localStorage) — anti-tampering for license expiry checks.
Your AI API key — kept in sessionStorage (cleared when the tab closes) by default; stored in localStorage only if you tick "Remember on this device".

We use no advertising or analytics cookies. Our hosting provider (Cloudflare Pages) may set operational cookies and collect standard access logs per its own policies.

4. Payments

Purchases are processed by Dodo Payments, our Merchant of Record. Payment and billing information required to complete the transaction is handled by Dodo Payments and its payment infrastructure — we never see or store your card details. After a successful purchase, SheetSanitizer receives the customer information included in Dodo Payments' payment webhook that is necessary to issue and deliver the SheetSanitizer license, including the purchase email address. Our license service (a Cloudflare Worker) then generates your license and emails it to you via Resend. We retain the minimum needed to deliver and support your license. Your spreadsheet files are never part of this — they are processed locally in your browser and are not sent to Dodo Payments or to us.

5. Support and the contact form

If you email support@sheetsanitizer.com or use the form on our Contact page, we receive the name, email address, topic, and message you submit. Form submissions are relayed by our Cloudflare Worker and delivered to our support inbox via Resend. Please don't include sensitive spreadsheet contents unless support specifically asks.

6. What we do NOT do

No third-party tracking scripts or advertising trackers.
No sale or sharing of personal data for advertising.
No collection of your spreadsheet contents or filenames.

7. Your choices

Clear your browser storage to remove the license key and any remembered AI key from a device. Contact support to ask about data connected to your purchase.

8. Changes & contact

We'll update this page if our practices change. Questions: support@sheetsanitizer.com