The shortest honest
privacy policy we could write

Summary

We collect nothing. Not your files, not your IP-based analytics, not cookies, not fingerprints. This is not a promise about how carefully we handle collected data — it is a statement that no collection exists, enforced by the site's own code.

Your files

Every tool runs entirely inside your web browser using JavaScript and standard browser APIs (FileReader, Blob, Service Worker). When you open or drop a file, your browser reads it from your disk into memory belonging to your device. No code path transmits it anywhere. The site enforces a Content-Security-Policy of connect-src 'none', which makes outbound network requests technically impossible — including for any injected script.

What this means practically

• No file contents ever reach us, so we cannot read, store, sell, subpoena-respond-to, or breach them.
• Closing or refreshing the tab erases everything; there is no session to persist.
• Processing sensitive data (payroll, health, client records) carries no third-party disclosure risk here.

Cookies and tracking

None. No analytics platforms, no advertising pixels, no A/B testing scripts, no consent banners to click through. If we ever add optional functionality requiring storage, it will be documented on this page first.

Server-side data

The site consists of static files served from a CDN (Cloudflare Pages). Like any web request, the CDN provider may see standard connection metadata (IP address, user agent) at transport level to deliver pages and mitigate abuse. This is unavoidable infrastructure, applies to every website you visit, involves no file contents, and is not used for profiling or advertising.

Contact

Questions about this policy: privacy@nocloudcsv.com. Better yet — verify our claims yourself: open your browser's DevTools → Network tab while using any tool, or load the page once and go offline.