EXCELCRAFT / PRIVACY
Your spreadsheet stays on your device.
Local files
When you choose a file, the browser reads it into memory. The Rust/WebAssembly engine processes the workbook on your device. Files are not sent to an ExcelCraft server. Opening from a landing page temporarily passes the file to the editor through a local IndexedDB handoff; that handoff is deleted after the editor reads it, or on a later visit if it is more than 15 minutes old.
Downloads and storage
Downloads create local copies. Workbooks are not automatically saved. Browser preferences may be stored by the editor. Close the editor when working on a shared device and download your changes before leaving.
Website delivery
The hosting provider processes ordinary request information, such as IP address, browser details, requested URL, and timestamp, to deliver and secure the website. File contents are not included in those requests. ExcelCraft uses optional Google Analytics 4 to understand page visits, successful workbook opens, workspace readiness, and download starts. Analytics loads only after you allow it. Browser Do Not Track and Global Privacy Control signals disable it. Events exclude filenames, workbook contents, email addresses, account IDs, URL query strings, and fragments. Google may set analytics cookies when enabled; advertising features are disabled. Google privacy policy.
Optional Google account
Sign-in requests only your basic Google profile and email, with no access to Drive or spreadsheets. Cloudflare D1 stores your profile, encrypted authentication tokens, sessions, and preferred starting tool and download format. Session cookies are Secure, HttpOnly and SameSite=Lax. Signing out ends the current session. You can delete your account and saved preferences from the account page; local files are unaffected. No workbook is associated with your account.
External links
Links to the GridCraft repository and other external resources are subject to those sites’ policies.
Last updated: October 12, 2026.