# Privacy

**Your data is never sent to this site.** That is not a policy, it is how the thing is built, and
you can check it rather than take it on trust.

## What happens to a file you open

Nothing leaves your computer. When you drop a CSV, TSV, Parquet or `.drd` file on the page:

- The file is read by your browser, from your disk, using the browser's own file API.
- The query engine — DuckDB-WASM — runs inside the page. There is no server doing the work.
- Nothing is uploaded, and nothing is written to browser storage: no cookies, no localStorage,
  no IndexedDB, no service worker cache. Close the tab and nothing of your data remains.
- Anything you export — a `.drd` bundle, a report, a copied table — is written by your browser
  to wherever you tell it. It does not pass through us.

## How to verify that

Open your browser's developer tools, switch to the Network tab, and use the site. Loading the page
fetches the page and the engine, and then it goes quiet — opening a file, filtering, charting and
exporting produce no requests at all.

Every one of those requests goes to this site. The engine is served from here rather than a CDN,
and the page loads no external fonts, scripts or images, so there is no third-party host to trust
either. If you want to be certain, save the page and its `vendor/` directory, disconnect from the
network, and use it offline. It works.

## What the web server sees

Serving a web page means receiving a request, and requests carry information. Like any web server,
this one records:

- the IP address the request came from
- the date and time
- which file was requested
- the browser's user-agent string, and the referring page if the browser sends one

That is the standard log every web server keeps. It is used to keep the site running and to notice
abuse, and for nothing else. It is not combined with anything, not sold, not shared, and not used
to build a profile of anyone.

Note what is *not* in that list: the name of any file you opened, its contents, or anything you did
after the page loaded. The server never learns those, because it is never told.

## No tracking, no accounts

- No analytics, of any kind, first-party or otherwise.
- No advertising, and no ad networks.
- No cookies — which is why there is no cookie banner to dismiss.
- No accounts, no sign-in, no email address collected.
- No third-party scripts, fonts or beacons embedded in the page.

## Contact

Questions about this notice: [privacy@dashreporter.com](mailto:privacy@dashreporter.com).

## Changes

If this notice changes, the date below changes with it. Since nothing is collected, there is no
back catalogue of data that a future version could retroactively expose.

---

Last updated 2026-08-24.