Privacy
Your survey file is read and analysed by code running in this browser tab. It is never uploaded, and there is no server anywhere that could receive it. The only thing this site ever sends on your behalf is a licence key you have typed, to ask our payment provider whether it is still paid for — a request that contains the key and nothing else. Everything below follows from those two sentences.
How to check that yourself
Open your browser's developer tools, switch to the network panel, then drop a file into the screener. No request is made. Or load the page, disconnect from the network, and screen a file anyway — it works, because the parsing, the statistics and the export all run locally. We would rather you verified this than believed it.
What the site sends, in full
- Loading the page. Your browser fetches the HTML, CSS and JavaScript from our host, the same as any website. Nothing about your data is involved; at that point you have not opened a file.
- A licence check. If you paste a licence key, or return here from checkout, the key is sent to /api/licence on this site. That small server component asks Creem whether the key is currently active and returns yes or no. The request body contains the key. It does not contain your file, any row of it, any column name, any count, or any number derived from it — there is no field on that route that could carry them.
If you never enter a key, the second request never happens, and the free screener works completely without it.
No accounts, no cookies, no analytics
There is no sign-up and no password. We set no cookies. There is no analytics script, no tag manager, no session recording, no advertising pixel and no error-reporting service on any page. We do not know how many files you have screened, how large they were, how many respondents you excluded, or what any of it was about.
What is stored in your browser
One item, and only if you unlock: your licence key, in local storage under cleansample.licence.v1, together with the date it was last checked. Local storage is not a cookie and is not attached to requests. You can delete it from the unlock page or by clearing site data. Your survey files are never written to storage of any kind.
What our host can see
The site is served by Cloudflare Pages. Like any web server, Cloudflare records ordinary request logs — IP address, time, the URL requested, the user agent — for delivering the pages and protecting them from abuse. We have not enabled Web Analytics or any other measurement product on this site. Those logs never contain your survey data, because your survey data is never sent.
If you buy a subscription
Creem (Armitage Labs OÜ, Tallinn, Estonia) is the merchant of record and takes the payment. You give your details to Creem, not to us: we never see your card number and never handle it. What we can see in their dashboard is the subscription — its status, the email address used, the billing country and the amount. We use it to answer licence checks and to reply if you write to us, and for nothing else. Creem's own privacy policy governs the payment; it is linked from their checkout.
Under the GDPR
Because respondent data never reaches us, we are not a processor of it and there is nothing here to put in a processing agreement or a transfer assessment. You remain the sole controller of your respondents' data throughout, exactly as you were before you opened this page. For the subscription record, MTÜ Käitumisuuringute Keskus is the controller, with the purpose being to run the subscription and provide support, on the basis of performing our contract with you.
You can ask for a copy of what we hold about your subscription, ask for it to be corrected, or ask us to delete it after your subscription ends, by writing to estoniascape@gmail.com. Records we must keep for accounting are kept for as long as Estonian law requires and no longer.
Changes
If this page changes in a way that affects what leaves your browser, the date below changes and the change is described here rather than folded in quietly.
Last updated 6 August 2026