Skip to main content
Beta We're in open beta - lock in lifetime access to today's feature set for just £99.99.

GDPR Compliance

Your Data, Your Control, Your Responsibility

Last updated: January 15, 2026

We Are NOT a Data Processor

Because Simple Data Cleaner processes all data entirely in your browser (client-side), we never receive, store, or process your data. This means under GDPR, we are not acting as a data processor. You remain the sole data controller with full responsibility and control.

How Client-Side Processing Protects You

1

Upload Happens Only in Your Browser

When you select a file, it's read using JavaScript in your browser. The file content never leaves your computer's memory.

2

Processing is Local

Validation algorithms run entirely in your browser's JavaScript engine. No network requests are made to send your data anywhere.

3

Download Stays Local

When you download the cleaned file, it's generated in your browser and saved directly to your device. We never see it.

4

Memory is Cleared

When you close the browser tab, all data is removed from memory. Nothing persists on our servers.

GDPR Legal Basis

For Personal Data We Store (Account Information)

We only collect and process the following account information:

  • Email address
  • Hashed password (using bcrypt)
  • Name (if provided)
  • Subscription status and billing information
  • Usage metrics (for service limits)

Legal Basis: Legitimate interest - we need this information to provide you with the subscription service you requested and to manage your account.

For Data You Clean (Your Files)

We do NOT process, store, or have any access to the data files you clean.

Legal Basis: Not applicable - since we never receive this data, GDPR data processing rules don't apply. You remain the sole data controller.

Your GDPR Rights

Right to Access

You can request a copy of all personal data we hold about you (account information only). Contact us to make a request.

Right to Rectification

You can update your account information at any time through your Account Settings page.

Right to Erasure (Right to be Forgotten)

You can delete your account at any time. This permanently removes all personal data we hold about you. Contact us to request account deletion.

Right to Data Portability

You can export your account data in a machine-readable format. Contact us to request an export.

Right to Object

You can object to our processing of your personal data for marketing purposes. We don't send marketing emails, but you can update preferences in your account.

Data Retention

Account Data: We retain your account information for as long as your account is active. After you cancel your subscription, we retain data for 30 days to ensure smooth account restoration if needed.

Deleted Accounts: When you delete your account, all personal data is permanently removed within 7 days.

Billing Records: Financial transaction records are retained for 7 years as required by UK tax law.

Your Files: Never stored, so no retention period applies.

Security Measures

We implement appropriate technical and organizational measures to protect your account data:

  • HTTPS encryption for all data transmission
  • Passwords hashed with bcrypt (industry standard)
  • Prepared statements to prevent SQL injection
  • Input validation and sanitization
  • Regular security updates
  • Access controls and authentication

For more details, see our Security & Privacy page.

Data Sharing and Third Parties

We do not sell your data. We do not share your account information with third parties except:

  • Payment Processors: We use Stripe for payment processing. Your payment information is handled directly by Stripe and never stored on our servers.
  • Legal Requirements: If required by law or to protect our legal rights.

How to Verify Our Claims

You Can Verify Our Privacy Claims

  1. Open your browser's Developer Tools (F12)
  2. Go to the "Network" tab
  3. Select and process a file using Simple Data Cleaner
  4. You'll see NO file uploads or data transmission to our servers
  5. The only network requests will be for JavaScript files (our code)

Contact & Complaints

If you have any questions about our GDPR compliance or wish to exercise your rights, please contact us.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk