Owner-review draft · 13 July 2026

Privacy notice

Short answer: CatalogVigil reads your selected CSV in browser memory. The core checker does not upload catalogue data, create an account, set tracking cookies, or retain file contents. Closing or clearing the session removes the active in-memory data.

Data processed on your device

The selected file name, size, headers, rows, findings, and fix preview exist in the active browser tab. They are used only to provide the check and downloads. Raw rows and finding values are not placed in local storage.

Local preferences

The browser may store import intent and the “include observed values in JSON” preference in local storage. You can clear these through your browser or by clearing the session preferences. These settings do not contain catalogue data.

Optional analytics

Analytics is disabled in the delivered repository. If the owner configures a privacy-compatible endpoint, CatalogVigil sends only allow-listed event names, coarse file-size/row-count buckets, counts, report format, fix category, and rule ID. It rejects property names that might contain names, values, SKUs, URLs, handles, titles, or files. The owner must update this notice and obtain any consent required by the launch jurisdictions before enabling analytics.

External links and downloads

Opening a Shopify source or another external link discloses ordinary request information to that destination under its policy. Generated reports and corrected files stay on your device unless you choose to share them. JSON observed values are excluded by default.

Email contact

You can contact CatalogVigil at catalogvigil@gmail.com. If you email, Google processes the message and ordinary account/request information under its services and policies. Do not attach a private catalogue. Messages are retained only as reasonably needed to answer, keep necessary records, protect the service, or meet legal obligations.

Retention, deletion, and rights

The core service has no server-side catalogue store to delete. The operator currently resides in Portugal. Privacy or data-rights requests can be sent to catalogvigil@gmail.com. Identity may need to be verified before acting on a request. A future payment, hosted report, account, or analytics feature would require updated legal bases, retention, processor, transfer, and rights information before activation.

Owner and legal review

The operator's legal name and a jurisdiction-specific legal review still need to be added. Residence and contact details will be updated if they change. This notice is a practical description of the current product, not legal advice.