Privacy

Clear boundaries, not vague promises.

Local files and network imports behave differently. This page explains exactly what connects where.

Local Mode

  • Files selected with the browser file picker are read into browser memory.
  • Conversion, profiling, joins, previews, and downloads run in your browser using DuckDB-WASM.
  • Data Wrangler does not upload those file contents to our servers or store them in a database.
  • The core processing runtime and table-preview code are served as part of this website rather than loaded from a third-party CDN.
  • Some formats, currently including Parquet and XLSX, can cause DuckDB to download official format-extension code from DuckDB's extension service. That request includes ordinary network metadata, but not your selected file contents.

Downloaded output remains on your device unless you choose to send or upload it elsewhere. On supported touch devices, Save opens the operating system's share sheet; output is sent only to the destination you select.

Loading from a URL

URL import is a network-enabled mode with a different privacy boundary:

  • Your browser contacts the URL host directly; Data Wrangler does not proxy the request.
  • That host can receive your IP address, browser request metadata, requested path, and credentials embedded in a pre-signed URL.
  • After retrieval, processing still happens in your browser and Data Wrangler does not store the file.

Only load URLs from hosts you trust. Treat pre-signed URLs as temporary credentials.

Analytics and advertising

The surrounding website may eventually use analytics or advertising services that receive ordinary browsing information such as your IP address, browser type, and page viewed. Those services are not intended to receive file contents, file names, schemas, previews, or output.

The file-processing workspace is served from a separate browser origin inside a sandboxed frame and does not load advertising or analytics code. The browser prevents scripts in the surrounding page from reading the workspace. No advertising provider is currently enabled; this policy will identify providers and tracking behavior before that changes.