Privacy Policy

What leaves the browser, what is stored, and what analytics omit.

Updated November 10, 2026


Not published on this page: a company registration number, a registered office, and a governing-law clause. These pages describe how this application behaves. They are not a legal certification.

Choosing a file

When you choose a file on the homepage, this browser reads it to build a preview. The full file is not uploaded at that step. The page can show the file size and the current plan limits before you create an account.

The preview sample is not the whole file

The preview keeps up to five rows, plus the file name, the size in bytes, and the sheet, header, field, and filter settings you chose. Those details stay in this browser until you continue. After you register or sign in, that sample is sent to the server and stored on the account. The stored sample is still not the full file.

Importing the file

If the plan allows it, you upload the original file. The application stores that file in its private storage on the server that hosts this installation, and it stores a parsed copy of the rows so an endpoint can answer without opening the spreadsheet again. The original counts once toward storage. Another endpoint on the same file does not store a second copy. A preview that was not imported does not count as a hosted file.

The API

A published endpoint returns the visible fields for the rows that match its filter. Hidden fields are omitted. Requests are counted against the monthly quota. Access keys are stored so the account holder can see the curl example again.

Account and email

An account stores your name, email address, and a password hash. Email verification, password reset, and security notices use that address. Optional usage alerts and renewal reminders use it only when you leave those preferences on.

Payments

Choosing a plan on the pricing page does not capture a card. When Stripe checkout is enabled, Stripe processes the card payment and this application stores the payment record. Card numbers are not stored here.

Analytics and cookies

First-party page analytics count public visits. A saved preview records the file extension and how many sample rows were stored. It does not record the file name or the cell values. See the Cookie Policy for the cookies this app sets.

Deletion

You can delete the account from Settings. That signs you out, marks the account deleted, and removes the stored preview and imported file from private storage. FileToAPI does not publish a fixed retention period beyond that.