Privacy & diagnostics

DataTray is local-first. Every file you open, convert, deduplicate, clean, anonymize or compare is processed entirely on your own device. Nothing is uploaded, which is also why there is no file-size cap and no row limit.

• Nothing your data touches reaches the network. The engine that reads your files cannot make an HTTP request or read from cloud storage — that capability is switched off at the point the engine starts and cannot be switched back on, including by a query you paste into Data Explorer → SQL.
• Optional diagnostics only. Crash reports, Usage analytics and Reinstall / Uninstall analytics are each independently switchable in Settings ▸ Privacy & diagnostics.
• No sensitive content, ever. Diagnostics never include your file paths, filenames, column names, queries or values. At most they carry which utility was used, the kind of operation, a coarse size band and a general category of any error.
• The bandwidth exchange never sees your data. See The bandwidth exchange.
• Temporary files. Reading a workbook writes a temporary copy of the chosen sheet into your Windows temp folder; DataTray cleans those up when you quit.
• Clean & Anonymize is the tile built around this. Read its section in full before relying on it for anything that leaves your machine — particularly the honest description of what each anonymization action does and does not guarantee.

DataTray's full privacy policy is reachable from Settings ▸ About ▸ Privacy policy.