Security and privacy

Crosstabs is designed so we do not need your dataset, project, identity, or account. The supported analysis product runs in your browser and keeps source rows on your device.

The product boundary

  • There are no accounts, sign-ups, subscriptions, organization workspaces, or cloud project storage.
  • Imported CSV, Excel, SPSS, and project files are parsed in the browser. Respondent-level rows are not uploaded to Crosstabs.
  • Saved projects use versioned browser IndexedDB when available, with a localStorage compatibility fallback. You control deletion and backups.
  • Portable .ctproj files let you back up or move a project without creating a server copy.
  • The public statistical API accepts only the contingency-table aggregates explicitly included in a request. It does not accept or persist respondent rows or projects.
  • Local MCP tools can analyze data from your own machine without sending project rows to a Crosstabs-operated data plane.

Sharing and exports

  • Aggregate result links put counts, labels, and selected context in a URL fragment. Browsers do not send the fragment to the website in HTTP requests or referrer headers.
  • A complete aggregate result link is still a bearer disclosure: anyone who receives it can read its contents. Fragment encoding is not encryption and links cannot be revoked remotely.
  • CSV exports sanitize cells that spreadsheet software could otherwise interpret as formulas.
  • PDF and XLSX reports include analysis settings and audit metadata so the method travels with the result.
  • Portable project imports verify schema versions, inventory, and SHA-256 checksums before creating a new local copy. Checksums detect changes but do not authenticate the sender.

Operational telemetry

  • Operational logs and error reports must exclude source rows, uploaded files, project contents, prompts, exports, and browser-storage values.
  • Page analytics is disabled on aggregate snapshot routes and strips query strings and fragments before collection.
  • Health and fixed-shape error endpoints may report coarse release, route, browser, and failure-category information needed to operate the public site.
  • Crosstabs does not use telemetry to reconstruct a user identity or a project history.

Your responsibilities

  • Keep a .ctproj backup if the work matters. Browser storage is convenient local storage, not a synchronized or encrypted backup service.
  • Only share aggregate links and exports with people who are allowed to see their contents.
  • Use your organization’s device, browser, and data-handling policy for sensitive datasets.
  • Review methodology and disclosure notes before publishing a result; software cannot replace accountable research judgment.