Private by architecture, not by promise

We got tired of handing
files to strangers' servers

NoCloudCSV exists because "free online converter" has quietly become "upload your company's customer list to a server you know nothing about."

The problem with normal online tools

A 2026 audit of twelve popular online file converters found that eight retain uploaded files for at least 24 hours, four have terms allowing content access for "service improvement," and only one processed files entirely in the browser. Meanwhile, real people upload real payroll exports, patient lists and client data to these sites daily — usually without reading a word of the policy.

Under GDPR, uploading EU personal data to such a service can make you responsible for a data-processing relationship the tool was never designed to support. The anxiety is rational. The Reddit thread where an analyst admits to "the anxiety of uploading my messy CSVs containing client info" is not paranoia — it is an accurate risk assessment.

A different architecture

So NoCloudCSV takes a different approach: the tools cannot send your data anywhere, because the browser itself forbids it. Every page ships a Content-Security-Policy ofconnect-src 'none'. That is not marketing copy; it is a technical control enforced before any script runs. There are no analytics scripts to leak data, no CDN calls, no fonts fetched from third parties — nothing.

  • No uploads. Files are read by your own browser via the FileReader API.
  • No accounts. Nothing to sign up for means nothing linking files to you.
  • No limits. No servers paying for bandwidth means no reason to charge per megabyte.
  • No tracking. Zero cookies, zero pixels, zero telemetry — verifiable in DevTools.

Correctness is part of privacy

A tool you cannot trust with your data is also usually a tool that mangles it. Excel silently turns 000123 into 123, phone numbers into scientific notation, dates into serial numbers. Our parsers follow RFC 4180 strictly, preserve leading zeros, detect EU semicolon delimiters, and treat every value as exactly what it is — text you asked to move, not numbers Excel decided to interpret.

The roadmap

We ship weekly: join/merge next, then Excel round-trips, then anonymization. Every future tool follows the same non-negotiable rule — if it needs a server, it doesn't ship on this site.

Try the tools