The app: no network code, full stop
The csvlite application contains no network code at all — no telemetry, no analytics, no crash reporting, no activation calls, no update checks. This is verifiable from the binary's behavior: it never opens a network connection. Your files are opened read-only and never leave your machine. We cannot see what files you open, because nothing is transmitted to see.
The app stores a few things locally, all listed on the download page: your session and saved views, your license key if you've entered one, a trial-start record, and the sample dataset. All of it is on your disk, under your control, and removable.
The website: hosting and analytics
The website and the desktop application are separate. The no-network and no-telemetry promise above applies to the csvlite application. When you visit csvlite.com, your browser makes ordinary web requests. Cloudflare provides the website's hosting, delivery, security, and performance services and may process technical request data such as your IP address, browser details, requested page, and request time under Cloudflare's privacy policy.
We use Cloudflare Web Analytics to understand aggregate page traffic and loading performance. It uses a browser beacon to collect page-view and performance metrics. Cloudflare states that Web Analytics does not collect or use visitors' personal data and does not track individual users across its customers' websites. We use these reports only to maintain and improve csvlite.com. You can read Cloudflare's description of Web Analytics.
We do not use advertising pixels or cross-site tracking. Website analytics does not run in the csvlite application and cannot access the files you open or anything you do in the app.
When you buy csvlite
Checkout is handled by Paddle, our merchant of record. Paddle collects and processes your payment details, billing address, and tax information under Paddle's privacy policy — we never see your card number.
After a purchase, Paddle sends us your name, email address, and transaction reference. We use these to mint your license (your name and email are embedded in the key, which is what the app displays as "licensed to") and we keep them in a license register: license ID, name, email, tier, issue date, transaction reference, the key itself, and whether the purchase was refunded. We keep this register for as long as csvlite licenses are supported, because it is what makes lifetime license recovery possible. It is never sold, shared, or used for marketing.
License emails
License keys are delivered by email through Resend, an email delivery service, which processes the recipient address and message content for delivery. We send license mail and direct replies to your questions — no newsletters, no promotions, unless you explicitly ask to be notified about something.
License recovery
The recovery page sends the email address you enter to our licensing service, which re-sends any matching license to that address only and records the request briefly for rate limiting. The response never reveals whether an address has a license.
Your rights
You can ask us what we hold about you, ask for corrections, or ask for deletion at [email protected]. Note that deleting your license register entry makes the license unrecoverable — we'll confirm that trade-off with you first. For payment records, Paddle is the controller and their processes apply.
Changes
Material changes to this policy will be dated on this page.