This page explains how CSVall protects your data while you use our free online CSV tools. We focus on practical safeguards: browser-first processing, HTTPS for site traffic, limited operational logs, and careful use of third-party services.
1. Encryption in transit
Traffic between your browser and our servers uses HTTPS with modern TLS. That protects data from being read or changed while it travels over the network.
2. How we handle your files
Our converters, viewers, and editors are designed to run in your browser. For those tools, files stay on your device and are not uploaded to our servers for routine processing.
Some workflows may keep short-lived derived content in sessionStorage so a results page survives a refresh. That storage lasts for the browser session unless a tool page says otherwise.
If a future tool clearly labels server-side processing, files for that job would be sent over HTTPS, used only for the requested conversion, and deleted after processing. We do not sell your files or use them for marketing lists.
3. Operational data
We may keep limited operational data such as security and access logs, analytics events (when allowed), UI preferences, and contact messages. See our Privacy Policy for details.
4. Platform safeguards
We use reasonable technical and organizational measures, including:
- HTTPS for connections to our site and APIs
- Access controls for systems that handle account or contact data
- Rate limiting and abuse controls to protect availability
- Dependency and hosting practices aimed at keeping the service reliable
5. Third-party services
We rely on trusted providers to run parts of the service, such as hosting, analytics (when you allow it), email delivery for contact messages, optional sign-in, and light advertising when ads are enabled. Those providers process data under their own terms. We do not sell your personal information.
6. What you can do
You can help keep your use of CSVall safer by:
- Preferring browser-local tools for highly sensitive files
- Reading tool pages before processing regulated or confidential data
- Signing out on shared devices if you use an account
- Managing cookies and ad preferences in your browser
- Reporting suspicious activity or security concerns promptly
7. Reporting a security concern
If you believe you found a security issue, email contact@csvall.com with enough detail for us to understand and reproduce the problem. Please do not publicly share exploit details before we can review them.
8. Limits and updates
No online service is perfectly secure. We work to protect your data with reasonable measures, but we cannot promise absolute security against every threat.
We may update this Security page when our practices change. When we do, we update the date at the top of this page.