Privacy Policy
Effective Date: May 16, 2026
1. Introduction
This Privacy Policy explains how Ubiquitous, LLC ("we," "us," or "our") handles information in connection with your use of CSVA2Z, a free browser-based CSV editor and column mapper available at csva2z.com (the "Service").
We have designed the Service to minimize the data we collect. This policy explains what limited information we do collect, how it is used, and the rights you have with respect to that information.
2. The Core Principle: Your Files Never Leave Your Device
CSVA2Z processes all CSV files entirely within your browser using client-side JavaScript libraries (PapaParse and SheetJS). When you upload, edit, remap, merge, or export a CSV using the Service:
- The contents of your file are never transmitted to our servers.
- We have no ability to read, store, copy, retain, or analyze your file data.
- Your data remains on your device throughout the entire workflow.
If you close the browser tab without exporting, your work is discarded. No server-side copy exists at any point.
3. Information We Collect
The only information we collect is as follows:
- Google Analytics 4 (GA4) data: We use Google Analytics 4 to understand aggregate website usage (e.g., page views, approximate geographic region, browser type, device type, referring site). This data is collected via cookies and similar technologies set by Google. We do not link this analytics data to any personally identifying information.
- Theme preference (stored locally in your browser): When you toggle between light and dark mode, your preference is stored in your browser's localStorage under the key "theme". This value never leaves your browser and is not transmitted to us.
We do not collect, store, or process the contents of your CSV files, the column mappings you create, the templates you save, or any other data you work with in the Service. We do not require accounts, sign-ups, email addresses, or any other form of identification to use the Service.
4. How We Use the Information We Collect
The Google Analytics data described above is used solely to:
- Understand how visitors arrive at and navigate the site
- Identify which pages and features are most used
- Diagnose performance issues
- Make informed decisions about Service improvements
We do not sell, rent, lease, or trade your information. We do not use analytics data for targeted advertising. We do not build user profiles for marketing purposes.
5. Cookies and Tracking Technologies
Cookies are small text files that websites place on your device. CSVA2Z uses cookies for the following limited purposes:
- Analytics cookies: Google Analytics sets cookies (typically prefixed with "_ga") to distinguish unique visitors and sessions. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.
- Browser localStorage: As noted in Section 3, your theme preference is stored in your browser's localStorage. This is not technically a cookie but serves a similar function. It does not transmit data to us.
Most browsers allow you to control cookies through their settings. Disabling cookies will not impact the core functionality of the Service (which is client-side); it will only prevent Google Analytics from recording your visit.
6. Data Retention
We retain only the limited Google Analytics data described above, subject to Google's standard retention policies (which we have configured to the minimum supported period). Theme preference data stored in your browser's localStorage persists until you clear your browser data; we have no copy of it and cannot access it remotely.
Because we do not collect CSV file contents or other user data, there is no user-data retention period applicable beyond what is described here.
7. Information Sharing and Disclosure
We do not share, sell, or disclose personal information to third parties, except as follows:
- Google Analytics: Aggregated, anonymized usage data is shared with Google as a processor for the purpose of providing analytics services. Google's handling of this data is governed by Google's Privacy Policy.
- Legal requirements: We may disclose information if required to do so by law, court order, or valid legal process, or to protect our rights, property, or safety, or the rights, property, or safety of others.
- Business transfers: In the event Ubiquitous, LLC is involved in a merger, acquisition, or sale of assets, we may transfer the limited data we hold (which does not include user CSV content) as part of that transaction.
8. Security
We implement reasonable technical and organizational measures to protect the limited information we collect against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet and no method of electronic storage is 100% secure. The most robust security feature of the Service is structural: because CSV files are not transmitted to our servers, they cannot be exposed in the event of a server-side breach.
9. Children's Privacy
The Service is not directed at children under the age of 13 (or under the age of 16 in jurisdictions where that is the applicable threshold for parental consent under data protection law). We do not knowingly collect personal information from children. If you are a parent or guardian and you believe your child has provided us with personal information, please contact us at admin@ubiquitous.llc and we will take steps to delete such information if it exists.
10. Your Privacy Rights — Generally
The rights you have with respect to your information depend on where you reside. The sections below describe rights specific to California, the European Economic Area, the United Kingdom, and Switzerland. Residents of other U.S. states (including but not limited to Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and Montana) may have substantively similar rights under their respective state privacy laws. To exercise any privacy right described in this policy, contact us at admin@ubiquitous.llc.
11. California Privacy Rights (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA"), grants you specific rights regarding your personal information.
Under the CCPA, you have the right to:
- Know what personal information we collect, use, disclose, and (if applicable) sell or share.
- Access the specific pieces of personal information we have collected about you.
- Delete personal information we have collected from you, subject to certain exceptions.
- Correct inaccurate personal information we maintain about you.
- Opt out of the sale or sharing of your personal information.
- Limit the use and disclosure of sensitive personal information.
- Non-discrimination for exercising any of your CCPA rights.
In the 12 months preceding the effective date of this policy:
- We have not sold personal information.
- We have not shared personal information for cross-context behavioral advertising.
- We have collected only the categories of information described in Section 3 of this policy (internet or other electronic network activity information via Google Analytics).
To exercise any CCPA right, contact us at admin@ubiquitous.llc. We will respond to verified requests within the timeframes required by the CCPA.
12. European Users (GDPR) and UK / Swiss Users
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR), the UK GDPR, or the Swiss Federal Act on Data Protection (FADP), as applicable, provides you with the following rights with respect to personal data we hold about you:
- Right of access: obtain confirmation of whether we process your personal data and a copy of that data.
- Right to rectification: request correction of inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"): request deletion of your personal data.
- Right to restrict processing: request that we limit how we use your data.
- Right to data portability: receive your personal data in a structured, commonly used, machine-readable format.
- Right to object: object to certain types of processing, including processing based on legitimate interests.
- Right to withdraw consent: where processing is based on consent, withdraw that consent at any time.
- Right to lodge a complaint: with your local data protection authority.
Our lawful basis for processing the limited information described in Section 3 is our legitimate interest in operating and improving the Service. Where applicable, we rely on your consent for Google Analytics cookies, which you may withdraw at any time using the opt-out mechanism described in Section 5.
To exercise any GDPR right, contact us at admin@ubiquitous.llc.
13. International Data Transfers
Ubiquitous, LLC operates from the United States. Google Analytics data is processed by Google on servers located in the United States and other jurisdictions. By using the Service from outside the United States, you understand that your information will be processed in the United States. Where required by law, we rely on appropriate safeguards (such as Standard Contractual Clauses or equivalent mechanisms) for international data transfers.
14. Third-Party Links
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.
15. Do Not Track Signals
Some browsers offer a "Do Not Track" ("DNT") setting. Because there is no industry consensus on how to interpret DNT signals, the Service does not currently respond to them. You may opt out of Google Analytics tracking using the mechanism described in Section 5.
16. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, applicable law, or for other operational, legal, or regulatory reasons. When we make material changes, we will revise the "Effective Date" at the top of this policy and, where appropriate, provide additional notice (such as a notice on the Service). Your continued use of the Service after any change indicates your acceptance of the updated policy.
17. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your information, please contact:
Ubiquitous, LLC
239 State Route 39
New Fairfield, CT 06812
United States
Email: admin@ubiquitous.llc