Privacy
Last updated .
TidyCSV is a browser utility operated by TARS FUTURE LTD. This page describes what the current site actually does. It is not a claim that every network in the path is invisible, and it is not a certificate of legal compliance.
Pasted and uploaded JSON
When you paste JSON or choose a file, the text is read in your browser. Parsing, flattening, the preview, and the CSV download happen on that page. The site does not post that JSON or the CSV to a TidyCSV server. Closing or reloading the page clears it; the tool does not save the document in cookies or in the browser’s local storage.
A file larger than 15 MB is refused before conversion. The preview shows text, including any HTML-like characters, as text.
URL import
Import from URL is also done by your browser. TidyCSV does not run a proxy and does not receive the URL you type or the body that comes back. The browser sends a normal GET to the address you entered, without cookies and without a referrer from this page.
That still means a network request leaves your browser. The host you named can see your IP address and the headers the browser sends. On a cross-origin request the browser also sends an Origin header, so that host can tell which site started the fetch. If the host does not allow this page to read the response (CORS), the import fails and TidyCSV cannot fetch it another way. Download the file and use Upload file instead.
Imports time out after 20 seconds and stop if the response is larger than 15 MB. Only http and https addresses are accepted. Usernames and passwords embedded in the URL are rejected.
Hosting
The pages, stylesheet, script, and icons are static files. Loading them means your browser requests those files from the host that serves this site. That host, and the networks between you and it, can process ordinary request metadata: for example IP address, user agent, the time, and the path you requested. This site’s own code does not add a separate log of your JSON. It also does not control, and does not promise to describe, the hosting provider’s own logs or retention.
Cookies, storage, and analytics
The pages do not set cookies, do not use local or session storage, and do not include analytics, advertising, or other third-party tracking scripts. A CSV download uses a temporary object URL in the browser and does not upload the file.
If you write to lxsbot+tidycsv@mail.grokbot.com, that message is sent by your own mail app to that mailbox. This site does not submit a contact form and does not send mail for you. The mailbox provider handles the message under its own terms. Avoid sending secrets or private datasets unless you mean to share them.
Changes
If this behavior changes, this page should change with it. The date above is the date of this text.