Privacy
Last updated: June 17, 2026
The contents of your files never leave your browser. Tabularly's tools — merge, append, dedupe, filter, column-pick, format conversion — all run as JavaScript on your own device. There is no server step that uploads, reads, or stores your data. You can verify this yourself: open your browser's DevTools network tab, drop a file into the tool, and watch — no upload appears.
This is the one promise that matters most, and it holds no matter what else is on the page. Everything below is about the small amount of other data — page metadata, your account if you create one, and advertising — that keeps the free tool running. We aim to be precise rather than absolute: here is exactly what is and isn't collected.
What never leaves your browser
The following stay on your device, always:
- The contents of your files
- The filenames of your files
- The column names in your files
- The cell values in your files
- The number of rows in your files
No third party on the page — including our advertising partner — can reach this data: the tools hold it in your browser's memory and private on-device storage, and ad slots are isolated so they cannot read the page's contents.
What we collect
Everyone (just using the tools)
- Cookieless analytics. We use privacy-respecting, cookieless analytics (Cloudflare Web Analytics and PostHog, configured without cross-site cookies) to count page views, categorical events ("join executed", "size limit hit"), the file format category (csv, tsv, xlsx — never the filename or contents), and aggregate performance timing.
- Basic request data. Like every website, our host briefly sees your IP address and browser user-agent in order to serve you the page.
When you create an account or sign in
- Your email address (and, for Google sign-in, your name/avatar from Google), stored with our authentication provider so we can recognize you across sessions. You can use the entire free tool without an account.
When you upgrade to Pro
- Payment information, handled entirely by Stripe. We never see or store your full card number — Stripe processes the payment and tells us only your subscription status.
Advertising (free tier only)
Ads fund the free tool. Pro removes all ads. Our advertising partner (currently Google AdSense) may use cookies and similar technologies, your IP address, device and browser information, and approximate location to select and measure ads — including personalized ads where you have permitted them. Ads run in isolated frames and never have access to your files. We may change advertising partners over time; this page will name the current one.
Cookies and consent
Our analytics are cookieless. Advertising on the free tier may set cookies. Where the law requires it (the EU, UK, and Switzerland), we ask for your consent before any personalized advertising or non-essential cookies, and you can change or withdraw that choice at any time. Upgrading to Pro removes ads and their cookies entirely.
Tabularly also stores a few small flags locally on your device (in localStorage) — for
example, whether you've dismissed a one-time notice — which are not sent anywhere.
Third-party services
We use a small number of carefully-chosen third-party services:
- Cloudflare — hosts the site and provides cookieless analytics. Sees your IP for the request that serves you the page.
- PostHog — cookieless product analytics (event counts above). Never receives file contents, names, or values.
- Supabase — authentication and account storage (your email, for signed-in users).
- Stripe — payment processing for Pro. Handles your card details directly; we never receive them.
- Google AdSense — serves ads on the free tier. See how Google uses data from sites that use its services.
- Tally — powers the Feedback form. Sees only what you choose to submit (your feedback text + optional email). Does not load until you click Feedback.
Your choices
- Go ad-free: upgrade to Pro to remove all ads and advertising cookies.
- Personalized ads: manage or opt out at Google Ad Settings, and adjust your consent choice via the cookie banner where shown.
- Your account data: use the Feedback button to request access to or deletion of your account; deleting your account also cancels any active subscription.
Verification
Our central promise — that the contents of your files never leave your browser — is enforced by an automated test that runs on every release. The test loads a file tagged with a unique marker, runs an operation on it, and asserts that no network request carries that marker — proving your file data never leaves the page. If the assertion fails, the release is blocked.
Changes to this policy
We will update this page if our practices change, and revise the "last updated" date above. Significant changes will also be announced in the product itself, not buried in a footer.
Questions
Use the Feedback button to send us privacy questions. We respond personally to all of them.