csvrepair← Back to csvrepair

Privacy Policy

Last updated:

Who is responsible for your data

csvrepair is operated by Oleksandr Rudenko, an individual independent developer, who is responsible for the data described on this page. Contact: support@csvrepair.site.

What is processed

  • Your files are never uploaded. CSV files, Excel workbooks and store exports are read and processed by JavaScript in your browser tab (a background worker). Their content, SKUs and prices are not sent anywhere. Supplier profiles are stored in this browser only (IndexedDB).
  • The site has no analytics or advertising scripts and sets no tracking cookies. The hosting provider (Netlify) serves the pages and keeps its usual access logs.
  • Online purchase. Payment is processed by Paddle, which collects your payment details and email under its own privacy policy. Our server (a Cloudflare Worker with a Cloudflare D1 database) stores: an order number, the Paddle transaction and customer IDs, the SHA-256 of your access key (never the key itself), and the SHA-256 fingerprints of the results you unlocked (never the files). The access key is kept in this browser's local storage.
  • Restoring a purchase. Your email is sent to our server to look up your purchase at Paddle and to email you a one-time code. The server keeps only a keyed hash of the email next to the hashed code, and deletes them one day after the code expires.
  • Optional image URL check (only when you start it, after a purchase): the image URLs of your file and the SHA-256 of the checked file are sent to our server, which requests those URLs from their hosts. The file itself is not sent.
  • Rate limits count requests under a keyed hash of your IP address (and, for restoring, of the email), never the address itself. Server logs contain no file data, keys or codes.

Service providers

We use the following providers to run the service:

  • Paddle.com (Merchant of Record): processes payments, collects your payment details and email at checkout, issues receipts and handles refunds, under its own privacy policy.
  • Cloudflare (Workers and D1): runs our purchase server and stores the order records described above.
  • Netlify: hosts the website and keeps standard access logs.

These providers may process data in countries other than yours.

How long we keep data

  • An order record holds the order number, the Paddle transaction and customer IDs and the fingerprints of the results you unlocked. Order records are kept while they are needed to unlock your downloads, handle refunds and meet legal and accounting obligations, and until you ask us to delete them where the law allows.
  • An order that is never paid is deleted, together with its access key, 30 days after it was created.
  • The SHA-256 of an access key is deleted once the key expires: 7 days after the 30-day access of the purchase ends.
  • The keyed hash of your email and the hashed one-time code for restoring a purchase: the code expires after 15 minutes, and both are deleted one day after that.
  • Rate-limit counters (under keyed hashes of IP addresses and emails) and the daily request budgets of the image URL check (under the order number and part of the checked file's SHA-256): deleted once they are older than one day.
  • Image URL check: the URLs are not stored. The server log notes only the order number and how many URLs were checked.
  • Payment notifications from Paddle (event ID and type, order number, outcome): deleted after 90 days.
  • Server logs hold only short event codes and order numbers (no file data, emails, keys or codes). How long they are kept is set by the hosting providers (Cloudflare, Netlify); our code sets no period of its own.

Your rights

You can ask us what data we hold about you and ask us to delete it. Email support@csvrepair.site and include the Order ID from your Paddle receipt so we can find your record. Your payment details and the email you entered at checkout are held by Paddle, and you can also send requests about that data to Paddle. Your CSV and Excel files never reach our servers, so we hold no copies of them. If we delete your purchase record, we can no longer unlock downloads through that purchase.

Questions? Email support@csvrepair.site.