Privacy Policy
Tabulens is built so that your tables stay on your device. This page lists everything the site and the program do process, why, and for how long.
In short
- Your files are never uploaded. They are opened and processed in your browser or in the Windows program, on your device. We never receive them and have no way to see them.
- No cookies and no third-party scripts on tabulens.com. Visits are counted by our own server without identifying anyone.
- We only store what you send us yourself (a request through the form) and anonymous counts.
- We do not sell data, do not show ads and do not send mailings.
Who is responsible
The controller for the data described here is the developer of Tabulens. For any question about your data, contact us: the request form on the Pro page.
Your files
Files you open in Tabulens are read and processed on your device: in the browser tab, in a background
thread, or in the Windows program. The contents of your files are not sent to us or to anyone else. This is
enforced technically, not just promised: the app is served with a security policy
(Content-Security-Policy: connect-src 'self') that does not allow the page to send data to any
other address, and you can check it in your browser's developer tools. After the first visit the app also
works offline.
Some things are saved on your device so the app can work, and only there:
- interface settings (theme, export choices and similar) — in the browser's local storage;
- saved sessions and lookup tables — only if you choose to save them, in the browser's private storage for the site (OPFS); you can see and delete them in the app;
- your Pro license key, if you have one — in the browser's local storage or in the Windows program's data folder.
We have no access to any of this. Clearing the site data in your browser removes it.
Visits to the website
Our server counts visits itself, from the requests it receives anyway. Nothing is stored in your browser for this — no cookies, no tracking pixels, no third-party analytics. For each day the server keeps only totals:
- the number of page views, app openings and downloads of the Windows program;
- which pages were opened;
- the website you came from — its domain only (for example
google.com), or theutm_sourcelabel of the link; - your browser's main language (for example
pt-BR) and whether it is a phone or a computer.
To count unique visitors, the server computes a one-way hash of your IP address, browser identifier and the site name together with a random value that is held in memory only and replaced every day. Neither the IP address nor the hash is written to disk; only the daily number is. As a result we cannot recognise you, and we cannot link your visits on different days.
The purpose is to understand which pages are useful and where readers come from. The legal basis is our legitimate interest in running and improving the site (Art. 6(1)(f) GDPR); since nothing identifies you, there is nothing to consent to and nothing to opt out of.
Server logs
The web server writes a technical log: time, requested address, response code, size, referring page and browser identifier. IP addresses are not written to it. The error log, which records failures of the server itself, may contain the address of the request that caused the failure. Logs are used to find errors and abuse and are deleted automatically after 14 days.
To protect the request form and the update service from abuse, the server keeps the IP address of a request in memory for up to one hour to limit how many requests come from one address. It is not saved.
Requests through the form
If you send a request on the Pro page, we receive what you entered: organization or name, contact person, email or phone, number of licenses and your message, plus the time and the language of the page. We use it only to answer you, to send a quote, an invoice or a license key, and for the resulting agreement. Legal basis: steps at your request before entering into a contract and the contract itself (Art. 6(1)(b) GDPR), and your consent given in the form (Art. 6(1)(a) GDPR), which you may withdraw at any time.
Requests are stored on our server. When notifications are switched on, a copy of the request is also sent to us as a message through Telegram. We keep requests for as long as we are in contact about them and, if you buy a license, for as long as accounting and tax law require; after that they are deleted. You can ask for deletion earlier at any time.
Purchase and license key
A Pro key contains the email address and order number you gave us and is signed by us. It is checked by the program itself, on your device, without contacting our server. We keep a record of the keys we have issued (email, order number, date) to restore a lost key and for accounting. Payment is made according to the details we send you; the bank or payment service you use processes your payment data under its own privacy policy, and we receive only the confirmation of payment.
The Windows program
The program checks for updates when it starts (if that option is on in “About and privacy”) and when you press “Check for updates”. With this request it sends: a random installation number created on your computer, the build of the program, its edition (international or Russian), the main Windows version (10 or 11), the processor type (x64, ARM64 or x86) and the language of the program's interface. Nothing else: no computer or user name, no system language or time zone, nothing about your files.
On the server the number is used to count installations: when the installation first and last checked for updates, which build, edition, Windows version, processor type and language. If you turn the automatic check off in “About and privacy” and do not press the button, nothing is sent at all. Legal basis: our legitimate interest in delivering updates and knowing how many copies are in use (Art. 6(1)(f) GDPR).
Who else is involved
Our servers are rented from a hosting provider, which processes data only on our behalf and under our instructions. If request notifications are on, Telegram transmits them. We do not use any other services that receive data about you, and we do not sell or rent data to anyone.
Your rights
You may ask what data about you we have, ask us to correct or delete it, to restrict its processing or to hand it over in a portable form, object to processing based on our legitimate interest, and withdraw consent at any time without affecting what was done before. Contact us: the request form on the Pro page. We answer within one month.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work. Residents of Brazil have the rights of the LGPD and may contact the ANPD; residents of California have the rights of the CCPA — we do not sell or share personal information.
Children
The site and the program are not aimed at children, and we do not knowingly collect data about them.
Changes
If the way we process data changes, we update this page and the date below.