Privacy

Last updated 12 August 2026.

SaltRim is a free, non-commercial project. This page says what it keeps about you, why, and how to get rid of it.

Who is responsible

Aleksandr Bogdanov, an individual rather than a company. Write to privacy@michelada.uno about anything on this page.

SaltRim is not established in the EU or EEA. It is offered to people there, so the GDPR applies to it under Article 3(2). No representative under Article 27 has been appointed: the processing is limited to account details and documents you create yourself, involves no special-category data, is not large scale, and is unlikely to result in a risk to your rights and freedoms. If that stops being true, this page changes first.

What is stored

From your login provider, when you sign in with GitHub or Google:

• your display name
• your email address
• your avatar image URL
• which provider you used, and the opaque account id it gave us (for example github-12345)

Created by you, as you use the app:

• your sheets — cell values, formulas, styles, comments, labels, your function library, branches, and the edit history that makes time-travel and merging work
• who you shared a sheet with, and sheets other people shared with you
• which account last wrote each cell, which is what per-user undo uses

Operational:

• a sign-in cookie holding a random token — only a SHA-256 hash of it is stored, never the token itself
• agent keys for MCP access, stored the same way, as a hash
• timestamps: when the account was created, when a token was last used, when each cell changed

There is no analytics, no tracking, no advertising and no third-party script on any page. Nothing is sold, and nothing is shared with anyone for marketing.

Why

To run your account and the service you signed up for — Article 6(1)(b), processing necessary to provide what you asked for. Your email address additionally makes it possible for someone to share a sheet with you by address.

Where it is kept

• Application server: vpsFree.cz, Czech Republic.
• Database: YugabyteDB Cloud on AWS eu-central-1 (Frankfurt, Germany).

Your data is stored in the EEA. YugabyteDB Cloud is run by a company based in the United States; any access by its staff for support purposes is governed by its data processing agreement.

How long

• Account details — until you delete your account. Nothing expires on its own; an unused account is not removed for you.
• Sign-in tokens — 90 days after they were last used, then deleted automatically.
• Sheets — until you, or the owner of a shared sheet, delete them.
• Backups — deleted data can survive in database backups for up to 30 days. After that it is gone from those too.

Deleting your account

Open the 🔑 panel in the toolbar and choose Delete my account. It removes:

• your name, email address and avatar
• every sign-in token and agent key
• every sheet you own, with all of its content and its history
• every share granted to you on other people's sheets

This happens immediately and cannot be undone. The history goes with it, so there is no earlier version of a deleted sheet to recover — not for you and not for anyone you had shared it with.

One thing is deliberately kept: the opaque account id (for example github-12345). It forms part of the identifier of every sheet you ever made, and it is recorded as the author of cells you wrote in other people's sheets — removing it would mean rewriting other people's documents. Once your name, email address and avatar are gone, that id is not connected to you anywhere in this system. We would rather say this plainly than claim an erasure more complete than the one we do.

Signing in again with the same provider account afterwards gives you a new, empty account under that same id.

Your rights

You can ask for access to your data, correction, deletion, restriction of processing, portability, and you can object to processing. Most of it is self-service:

• Access and correction — your name, email and avatar come from your login provider and are refreshed from it each time you sign in.
• Portability — every sheet exports to .xlsx from the toolbar, formulas included.
• Deletion — the 🔑 panel, as above.

For anything else, write to privacy@michelada.uno.

If you are in the EU or EEA and think this is being handled badly, you can complain to the data protection authority of the country you live in. The EDPB member list has the contact details.

Cookies

One cookie, holding your sign-in token. The app cannot work without it and it is used for nothing else — no analytics, no advertising, no profiling. That is why there is no cookie banner to click through.

Changes

If this page changes in a way that affects you, the date at the top changes with it. The page is in the repository, so every past version of it is in the git history.

SaltRim · Privacy · Terms · Source