Privacy
Last updated
- Your file never leaves this device — not its contents, not its column names, not its file name.
- It’s converted and kept in your browser’s own storage, on your machine. You can clear it whenever you like.
- Rowmill counts which features get used. It never sends anything from inside your file.
- Give us an email address for recipes and you get one email. Nothing else, ever.
What happens to your file
When you open a file, your browser reads it straight from your disk. Rowmill converts it here, on this device, into a form that stays quick to work with, and keeps that copy in storage your browser sets aside for this site. Every total, filter and pivot you build is worked out on your machine.
It’s never sent anywhere. Not the contents, not the column names, not the file name, not one value from inside it.
You don’t have to take that on trust. The counter at the top of the app shows every byte Rowmill has sent, and it counts them as they go.
What’s kept on this device, and how to clear it
Two things: the converted copy of your file, and the session — which file you had open and how you’d arranged it. Both sit in storage your browser gives this site, on your own machine. No other site can read them.
To remove them, use Clear saved file and start over — it’s on the drop card, and in the overlay while a file is open. That deletes the converted copy and the session from this device. You can also clear the stored data for rowmill.app in your browser’s own settings.
Two limits worth knowing:
- Safari deletes them after 7 days if you don’t visit. That’s Apple’s rule, not ours. Your own file on disk is untouched — you’d open it again.
- Storage is per browser and per device. Open Rowmill somewhere else and there’s nothing waiting there.
What Rowmill counts
Rowmill counts how the app gets used, so we know which parts are worth building on. It never sends your file, and it never sends anything from inside it — no column names, no file name, no cell values.
What it does send is which things happened: you opened the app, opened a file, built or changed a pivot, looked at the SQL, drew a chart, exported a result, asked for early access, clicked “Save as recipe”, or ran out of memory. Alongside that, a rough description of the file’s shape — a band like “1M–10M rows”, never a measurement — and which kinds of column it has: numbers, dates, text.
None of this goes to an analytics company. There isn’t one. It goes to Rowmill, on the same address that served you this page.
We don’t know who you are. There’s no account, no cookie, and nothing kept on your device to recognise you by. To count how many people use Rowmill on a given day, we keep a scrambled one-way code made from your network address. It’s thrown away every 24 hours, so we can’t connect today’s visit to yesterday’s.
These counts are deleted automatically after three months. Monthly totals — how many pivots, how many exports — are kept longer, but they’re only numbers, with nothing attached to them.
Your email address, if you give one
One place on this site takes an email address: the card asking whether you want to know when recipes ship. Nothing else asks for one — the feedback form described below deliberately doesn’t — and nothing here needs an account.
If you type one in, it goes to Resend, who send the email for us, and it’s stored in a list there — your address and the date you added it. Nothing else: no name, no network address, no file name, no row count. Resend holds it in the United States, under a data processing agreement, Standard Contractual Clauses, and the EU–US Data Privacy Framework.
You get one email, when recipes ship, and then the list is deleted. It’s also deleted if Rowmill shuts down, or after 12 months — whichever comes first. To be removed sooner, use the unsubscribe link on the email, or write to hello@rowmill.app and we’ll delete it.
Feedback you send
The Send feedback button in Rowmill’s footer sends two things: the message you typed, and which version of Rowmill you were running. A review screen shows you both, and the exact size in bytes, before anything leaves your device.
It asks for no name and no address, so there’s nothing in it that identifies you and nothing of yours to delete afterwards. That also means it goes one way: we can read it, and we can’t reply to it.
Your file is not part of it and nothing is read from it. It arrives as an issue in the tracker this project is built with, and it stays there until that issue is deleted.
Who else is involved
Two companies, and this is the whole list:
- Cloudflare serves every page of this site. Like any host, it sees your network address when your browser asks for a page — including the one you’re reading. Sending an email address doesn’t add anything new: it goes to the same place that delivered this page.
- Resend sends the recipes email and holds the address list — only if you gave an address.
There’s no analytics company, no advertising, and no third-party script of any kind. Nothing on this page loads from anywhere but Rowmill.
Who we are
Rowmill is run by Indust Michał Katański, ul. Warszawska 40/2A, 40-008 Katowice, Poland. NIP 9542529842, REGON 362668312.
That’s who decides what happens to anything described on this page, and who to write to about it: hello@rowmill.app. You can also ask us to hand over or delete what we hold — though for your file, there’s nothing to hand over, because we never had it.