Privacy

Privacy policy

The short version: the spreadsheet you open in Sift is processed entirely in your browser and is never uploaded to us or anyone else. The only personal data Sift collects is what you choose to hand over: your email if you sign up for updates, and any feedback you send us along with the email you send it with, plus anonymous usage analytics that never include the contents of your files.

Last updated: 1 July 2026. Sift is operated as a personal project. Questions or requests about your data: privacy@siftdata.app.

Your files never leave your device

Sift is a static web app with no backend. When you open a CSV or Excel file, every step (profiling, cleaning, deduplication, column mapping, scoring, and export) runs locally in your browser using your device's own processing. Your rows, columns, and cell values are never sent to a server, because there is no server to send them to.

No account and no sign-in are needed to use the tool.
A strict content-security policy blocks the app from sending your file anywhere.
Once the page has loaded, cleaning a file works even with your network disconnected, which is a simple way to confirm nothing is being transmitted.
We never see, store, or have any access to the contents of the files you clean.

What we do collect

There are exactly three things, and all of them are separate from your file data:

1. Your email address, only if you give it to us

If you sign up for product updates, we collect the email address you enter. We use it to send occasional updates about Sift. We store and send these through third-party email and record tools (currently Loops and Airtable), and we may receive an internal notification when someone signs up. We do not sell your email, and you can unsubscribe from any update, or ask us to delete your address entirely, at any time.

2. Feedback you send us, and the email you send it with

If you use the in-app feedback or feature-request box, we collect exactly two things: the note you type and the email address you enter, which is required so we can read and reply. Only that text and that email are sent, never any part of your file. We store these through our database and record tools (currently Supabase and Airtable), and we may receive an internal notification so we can act on your feedback quickly. We use it only to read and act on your feedback. Sending feedback does not add you to any newsletter unless you tick the optional "send me updates" box, which is off by default; that marketing consent is separate and yours to give or withhold. We do not sell this information, and you can ask us to delete it at any time.

3. Anonymous usage analytics

We use privacy-respecting product analytics (currently PostHog) to understand how the tool is used, for example which features people open, how many files get cleaned, and which site or search sent someone to us. This helps us decide what to build next. These analytics record actions and page views, not the contents of your files. Your spreadsheet data is never part of any analytics event.

What we never do

We never upload, read, or store the contents of the files you clean.
We never sell your data to anyone.
We never enrich your data from third parties or connect to your CRM's API.
We never run AI or machine-learning transforms on your data. Every change Sift makes is a deterministic rule you can see, approve, and undo.

Cookies and local storage

Sift uses your browser's local storage to remember things on your own device, such as saved cleaning pipelines. That data stays in your browser. Our analytics may set a cookie or anonymous identifier to count returning visits. We do not use advertising cookies or third-party ad trackers.

Your rights

Because your file data never reaches us, there is nothing on our side for us to expose, lose, or hand over about the spreadsheets you clean. For the email address you may have given us, you can ask us to show you what we hold, correct it, or delete it. Email privacy@siftdata.app and we will act on it. If you are in the EU or UK, these are your rights under the GDPR, and Sift is built so that your working data is not processed by us in the first place.

Sub-processors

The third-party services we rely on, none of which ever receive your file contents, are: the site host (Vercel), product analytics (PostHog), our database (Supabase), our record tool (Airtable), and, only if you sign up for updates, our email tool (Loops). Supabase and Airtable hold your email and any feedback you choose to send; Loops holds your email only if you sign up for the newsletter.

Changes to this policy

If we change how any of this works, we will update this page and change the date at the top. If the change is significant, we will make that clear.