ExcelRewind records why spreadsheet numbers change into a shareable, replayable session
file (.rewind). This policy explains what we collect, why, and your rights. It
covers the Excel add-in, the Google Sheets add-on, and the web viewer.
.rewind
file — cell edits, notes, and any audio — is built and saved locally by the add-in. We do
not receive, store, or process your spreadsheet, its cell values, note text, sheet names,
workbook titles, or filenames.Your email address, used to sign you in (a one-time code, or Google sign-in) and to identify your licence and any subscription. That's the only personal identifier we hold.
To understand how the product is used we record small, structured events. Every event is metadata only — numbers, true/false flags, and short fixed labels. We never capture cell contents, note text, sheet names, workbook titles, filenames, or any free text.
| Tier | When | What it includes (plain language) |
|---|---|---|
| Minimal | Always on while signed in | That the pane was opened, that you signed in, that a recording started and stopped (how long, how many changes and notes, whether audio was used, and the session category you picked from the fixed "What are you working on?" list — never free text), that a file was saved (its size), that a session was imported, and that a replay was opened and closed (how long it was watched). |
| Full | Only if you opt in | Everything in Minimal, plus which features were used: recording settings toggled (audio, snapshot, tutorial, object sync), whether the mic test was used, that a note was added (a count only — never its text), replay speed changes, upgrade clicks, timeline seeks, and import mode. |
Full-tier collection is off by default. You turn it on with an unchecked opt-in box on the sign-in screen, and you can change it later in settings. Whichever tier you choose is stored against your account.
The web viewer needs no account, so its usage statistics are fully anonymous. We record that the viewer was opened, that a session file was played (and for how long), and coarse counts of which controls were used. To tell repeat visits apart we store a random identifier in your browser — it is not an account, is not linked to your identity, and we do no fingerprinting. We never receive file contents, file names, workbook or sheet names, or note text. If your browser sends Do Not Track or Global Privacy Control, viewer telemetry is disabled entirely.
If you subscribe, Stripe processes your payment and holds your billing details under its own privacy policy. We receive only the fact of a successful payment and your subscription tier — never your full card number.
| Data | Basis |
|---|---|
| Account (email), sign-in, licence | Performance of a contract |
| Minimal usage metadata | Legitimate interest (running and improving the product; minimal, metadata-only) |
| Full usage metadata | Consent (explicit opt-in; withdrawable at any time) |
| Billing | Performance of a contract |
Usage metadata is kept for 24 months, after which it is deleted or retained only in aggregated, non-identifying form. Account data is kept while your account exists and removed on request. Billing records are retained by Stripe and by us as required by law.
| Processor | Purpose | Region |
|---|---|---|
| Supabase | Authentication, account, usage metadata storage | United States |
| Stripe | Payment processing | Global (per Stripe) |
| Cloudflare | Hosting and delivery of the add-in and viewer | Global edge |
Your .rewind session files are not sent to any of these — they stay on your machine
unless you choose to share them yourself.
You can ask us to:
To exercise any of these, email [email protected]. You also have the right to complain to your local data protection authority.
If you are in the EU or UK, the lawful bases above apply. Full-tier metadata relies on your affirmative, unambiguous opt-in, and you may withdraw it at any time with no effect on the lawfulness of prior processing. We do not use your data for automated decision-making or profiling that produces legal effects.
If you are in India, we process your personal data on the bases described above. Full-tier metadata is collected only with your consent, which you may withdraw as easily as you gave it. You may request access to, correction of, and erasure of your personal data, and raise grievances, by emailing [email protected].
We do not sell or share your personal information for cross-context behavioural advertising. California residents have the right to know what we collect (see above), to request deletion, and to be free from discrimination for exercising these rights. Requests: [email protected].
We may update this policy; the effective date above will change and material updates will be communicated in-product or by email.
ExcelRewind is an independent product and is not affiliated with, endorsed by, or sponsored by Microsoft Corporation. Microsoft and Excel are trademarks of the Microsoft group of companies. General contact: [email protected].