Privacy

Last updated: October 27, 2026

Your files are processed locally in your browser and are never uploaded. You need an account to use SkuClinic. Your workspace (not your files) is kept in your browser and, while your free trial or subscription is active, synced to your account, held for us by Cloudflare.

SkuClinic is operated by Carina Dataworks. The app is a static website, and no server receives your spreadsheets. Accounts run on a small Carina Dataworks service hosted by Cloudflare.

What is kept in your browser

When you drop a file into the app, JavaScript in your browser reads it and does the math there. The file itself is never sent to Carina Dataworks or anyone else. The workspace built from it (stores, products and their numbers, settings and snapshots) is saved in your browser and, while your free trial or subscription is active, synced to your account (see below).

The app keeps these items in this browser’s storage on this device (local storage, plus IndexedDB for a large saved workspace). The workspace and column mappings also sync to your account while your free trial or subscription is active; the rest stays only in this browser:

• Your workspace (stores, products and settings), so it is there next time.
• Column mappings you chose to remember for a file type.
• That you agreed to the Terms, with the date and time you agreed, and which version.
• Small preferences: whether to show the welcome box and the next-steps tips.

Clearing site data for this site in your browser deletes the copy in this browser; the synced copy in your account stays while your account exists. When signed in, the browser also keeps your sign-in token and a note of the last synced version.

If you create an account

We store, in a database hosted by Cloudflare (Cloudflare D1):

• Your email address, when the account was created, and whether you have confirmed the email address.
• A scrambled (hashed, salted) version of your password. We cannot read your password.
• Sign-in sessions, stored only as a hash of the token, with an expiry. The token itself stays in your browser’s local storage.
• During your free trial or with an active subscription: your synced workspace (stores, products, settings, snapshots and saved column mappings), the device name it was saved from (for example “Chrome on Mac”), and the previous three cloud copies as backups. Your original files are never uploaded.
• Your subscription status, plan, trial and renewal dates, and the Stripe customer and subscription IDs.
• One free trial per email: so the free trial can’t be restarted, we keep a one-way scrambled (hashed) form of the email address and the date its trial ends, even after an account is deleted. It can’t be turned back into your email address, and nothing else is kept with it.
• Email we send you: only account email (a link to confirm your address after sign-up, and password reset links when you ask for one). It is sent from skuclinicapp@gmail.com through Google Apps Script, so Google processes it under its own privacy policy. The links are single-use; we store only a hash of each, and they expire (1 hour for password reset, 3 days for confirmation). During your free trial we also send two short reminders the same way, about 3 days before it ends and on the day it ends, unless you’ve already chosen a plan. No marketing email.
• To stop password guessing, short-lived counters of sign-in and password-reset attempts keyed by a scrambled (hashed) form of the IP address or email. They are deleted after a day.

Deleting your account (Account › Delete account) deletes all of that right away, including the backups, and cancels any subscription. Signing out lets you keep or remove the workspace in this browser.

What you type into a form

Only what you type into the signup form and the feedback form is sent: your email, if you give one, and your answers. It is emailed to skuclinicapp@gmail.com and saved in a private Google Sheet in that account, using Google Apps Script, so Google processes it. Your files and results are never included. If the signup address is not configured, the form sends nothing and says so.

We use it only to reply to you, to contact you about SkuClinic, and to improve the app. We do not sell or share it for advertising. We keep it until you ask us to delete it or we no longer need it.

Payments

Payments are handled securely by Stripe; Carina Dataworks never sees or stores your card. No card is needed for the free trial. When you choose a plan, Checkout and Manage billing open Stripe’s own pages, and your card details go straight to Stripe. Stripe handles them under its own privacy policy. We get only your email (to link the Stripe customer to your account), the plan, the subscription status and its dates, and the Stripe customer and subscription IDs. The email forms do not charge anything.

Page views

When Cloudflare Web Analytics is turned on, the site loads a cookieless counter from Cloudflare that records page views. It does not receive your files or your answers. When it is off, that script is not loaded.

Hosting

The site is hosted on Cloudflare Pages, and accounts are hosted on Cloudflare Workers. Cloudflare may keep standard server logs (such as IP address, browser type, and the time of the request) under its own privacy policy, for both the site and the account service. Those logs do not include your files or results.

Cookies

SkuClinic does not set cookies or use trackers. Signing in keeps a token in local storage, not a cookie. The optional page-view counter is cookieless. Stripe’s checkout pages may set their own cookies for fraud prevention.

Your choices and rights

You can delete your account and its data yourself at any time in the app. You can ask to see or delete what you sent through a form, or anything linked to your account, by emailing skuclinicapp@gmail.com. We will do it within 45 days. Depending on where you live (for example California or Connecticut), you may have other rights under state privacy law; ask and we will help. We do not sell personal information.

Children

SkuClinic is a business tool and is not meant for children under 13. We do not knowingly collect information from them. If you think a child sent us something, email us and we will delete it.

Changes

If this page changes, the “Last updated” date above changes too. If a change matters for how we use account data, we will email account holders.

Contact

Questions about this page: email skuclinicapp@gmail.com or use the feedback form in the app. SkuClinic is operated by Carina Dataworks.