Privacy

Last updated: October 21, 2026.

Your lists and files

Comparison runs locally in a browser Web Worker. TXT, CSV and XLSX files are read on your device. Exports are generated in browser memory; selected filenames, worksheet names, headers, cell contents and download bytes are not transmitted or stored by this tool. Original files are not modified. The tool does not upload your lists, results, input filenames, or hashes of these values. It does not save them in localStorage, sessionStorage, cookies, or a database. They remain in page memory while you work. Refreshing or closing the tab may clear them.

Feedback

When you choose to send feedback, your message, category, optional email, entry point and random submission ID are sent to Jack and stored privately in Cloudflare D1. Your email is used only to discuss that feedback. Technical details are optional: you can review the exact fields before choosing to include them. Lists and files are never attached automatically. Drafts remain in this page’s memory and are not sent when you leave.

Cloudflare hosts and checks these requests using Turnstile. For abuse prevention, the server uses your connection IP to compute a keyed identifier limited to a date and rate window. The application stores that short-lived identifier separately from feedback, never the raw IP. This identifier is not anonymous; Cloudflare also processes network information as a service provider.

Feedback in the active production database is scheduled for deletion after 180 days, with hourly cleanup. Short-lived rate counters are also cleaned up. Hosting backups may retain deleted data for a limited additional period. To request deletion, email contact@comparetwolists.net with your receipt reference. Analytics opt-out does not prevent you from sending feedback.

Hosting

Cloudflare hosts this site and processes web requests. Hosting infrastructure may process IP addresses, requested paths, browser information, timestamps and security logs. Local comparison does not mean that visiting the site creates no network traffic.

Usage analytics and your choice

We use Umami at stats.dawang.dev and Google Analytics 4 (GA4), enabled by default, to understand visits and basic tool usage. We send page paths and titles, comparison start/completion, successful copying, triggered downloads, import start/preview/application/cancellation, and fixed error categories. Operation data is limited to coarse size and duration ranges, rule switches, result category, demo status, import format and stage, fixed error and cancellation codes, and build and measurement versions. Screen dimensions and browser information are used for device classification; analytics providers may derive approximate geography from request metadata. We do not send list content, result values, filenames or their hashes.

No replay or heatmap recording is enabled. Page views are sent without URL query strings or fragments. For external referrals, we send only the source hostname (such as google.com), formatted with its HTTP/HTTPS scheme; source paths, query strings, fragments, credentials and port numbers are discarded. Direct visits, internal referrals and unavailable sources have an empty referrer. Comparing and changing result categories do not generate additional page views. Both analytics services receive network metadata needed to process requests. GA4 uses first-party analytics cookies to distinguish browsers and sessions. Google signals and advertising personalization are disabled. We use manually selected events, without automatic collection of form interactions, outbound links, or file downloads. Google processes analytics data as described in its Privacy Policy.

Use the Analytics control in the footer to turn both Umami and GA4 off or on. Turning it off stops future analytics collection; it does not delete previously collected data or existing analytics cookies. That non-sensitive preference is saved locally. Maintenance visits can carry a test-traffic flag, with only a boolean saved for the current tab session so they can be excluded from reports. Do Not Track or Global Privacy Control disables both analytics services on page load. Comparison works when analytics is blocked or unavailable.

Advertising and contact

Advertising is disabled. If you email us, your email provider and ours process that message; send only the information needed to describe the issue. For privacy questions contact contact@comparetwolists.net.