Privacy Policy

Last updated: October 13, 2026

xlsx.com ("we," "our," or "us") operates xlsx.com. This page explains what information we collect, how we use it, and what choices you have.

Information We Collect

Account information. When you create an account, we collect your email address and name. If you sign in with Google, we receive your name and email address from Google.

Your spreadsheets. Our tools work on your files in your browser. The files are not uploaded to our servers, and neither is anything in their cells. The one thing that can leave your browser is a saved audit scan, described next.

Saved audit scans. If you have Pro and choose to save a Workbook Audit scan, we store it with your account: the name you give it, a SHA-256 fingerprint of the file (worked out in your browser, so we can tell when you scan the same file again) and one of its file name (so your reviews, below, still find the file after it changes), the date, the file type, the sheet names, and for each finding its check, severity, count and location (cell addresses, row and column numbers, defined names). We don't store the file or any value, text or formula from its cells, and we leave out the people, folders, network paths and data sources a scan can find in a file. You can delete one saved scan or all of them on your account page at any time.

Reviewed findings. If you have Pro and mark an audit finding as reviewed or intended, we store with your account: that status, the note you type (exactly as you type it), the date, the finding's check and locations (as above, no cell contents), a SHA-256 fingerprint of the file, and a SHA-256 fingerprint of its file name, so the mark can find the file again after it changes. A fingerprint of a short file name isn't anonymous: someone who guessed the name could check it against the fingerprint. You can reopen one finding from the audit, or delete all your reviews on your account page, at any time.

Check thresholds. If you have Pro and change the Workbook Audit's thresholds (when a formula counts as complex, the file sizes that count as large, numbers the hardcoded-number check skips, and the rest), we store the numbers you set with your account, and a scan you save keeps the ones it ran with, so comparing two scans can tell when they counted differently. They're the numbers you type into the settings; nothing is read from your file for them. Resetting them to the defaults in the audit, or deleting them on your account page, deletes the account's copy.

Messages you send us. When you use the contact form, we receive the name (if you give one), email address, topic and message you enter. If you send it from your account page, the message also carries your account ID, your plan and, if you have paid, your Stripe customer ID, so we can help with billing. The message is emailed to our support inbox and isn't stored in our database. The form uses Cloudflare Turnstile to tell people from bots, which checks your browser and IP address.

Usage data. We collect standard server logs including your IP address, browser type, pages visited, and time spent on the site. We use Google Analytics for aggregate traffic analysis.

Cookies. We use cookies to keep you signed in and to understand how the site is used. We do not use advertising cookies.

How We Use Your Information

  • To provide and improve the service
  • To send transactional emails (account confirmation, password reset)
  • To analyze usage patterns and improve content
  • To contact you about your account if needed

We do not sell your personal information. We do not share it with third parties except as described below.

Third-Party Services

We use the following third-party services:

Data Retention

We retain your account information for as long as your account is active. You can request deletion of your account and associated data at any time through our contact page.

Your Rights

You have the right to access, correct, or delete your personal information. To exercise these rights, use our contact page.

Children's Privacy

xlsx.com is not directed at children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by posting a notice on the site or emailing you.

Contact

Questions about this policy? Use our contact page.