Privacy policy

Who we are

Ottersheet is operated from the Philippines by a sole proprietorship trading as Ottersheet. The Philippine Data Privacy Act of 2012 governs how we handle any personal data we hold, which in the free tier is at most an email address you chose to give us.

Where your files are read

A file you give Ottersheet takes one of two paths, and neither reaches us.

1. Every file is read in your browser: delimited files, spreadsheets, pasted tables, HTML and JSON. Nothing in them is sent to us. PDF and Word files are not accepted yet; when they are, they will be read in your browser the same way.
2. The original file is kept on your device, in your browser’s own database, so you can download it again from the Files page. Remove it there, or clear the browser, and it is gone; nothing on our side can bring it back.

Identifiers dropped first

Before a table is read, any column whose header we recognise as a person’s identifier is dropped: name, email, phone, date of birth, dates about the person, chart number, address, government id, account, notes. The drop happens before structure, before typing and before anything is logged, it is not reversible, and the rules on the dashboard list the columns removed from each table so you can check it.

What leaves your browser

Three kinds of thing, and nothing else. First, the ordinary traffic of any web page: when your browser loads Ottersheet, our host, Vercel, sees your IP address and browser type in its request logs, as every web server does. Second, six analytics events, by name: upload, upload failed, tables accepted, mapping completed, margin reached, email captured. Each carries counts and classes only, never a cell, a header, a file name or a page address; today they are kept in your browser for the session and sent nowhere, and when we add a counter this page names it. Third, error reports: today none leaves your browser; when we add an error processor this page names it, and every report is stripped of table filters before it is sent, so it never carries a row, a header or a cell.

If you give us an email address on the exit ask, we use it to send you your setup and for nothing else. We do not sell it, share it, or add it to any list. Write to support@ottersheet.com and we delete it within ten business days.

Do Not Track and cookies

Ottersheet sets no cookies and uses no tracking identifiers, and no third party collects information about your activity across other websites through it. Because we do not track, we do not change behaviour in response to a browser’s Do Not Track signal; there is nothing to switch off. The checkout for a paid tier, which Paddle runs, sets its own cookies under Paddle’s privacy notice.

No accounts, no database

The free tier has no account and no database on our side. Your workspace lives in this browser, on this device.

Your rights and changes

You can ask what we hold about you (at most an email address), correct it, or have it deleted by writing to support@ottersheet.com; we answer within ten business days. When this policy changes materially, the change is announced on this page for thirty days before it takes effect, and the date at the top moves.