Privacy

Last updated 6 October 2026

Your file stays on your device. Nothing is uploaded. This page explains how that works, what little data the site does handle, and how you can check it yourself.

Who we are

OpenSQLite (opensqlite.com) is run by Romesh Kosme, an independent developer based in India. For anything about this policy or your data, email hello@opensqlite.com.

Your database file

When you open a file in OpenSQLite:

  • Your browser reads it from your device into the memory of the browser tab.
  • It is opened read-only by SQLite running inside your browser (SQLite compiled to WebAssembly, in a background worker). The file is never modified.
  • Its contents, its name, and the names of its tables and columns are never sent anywhere. Not to us, not to anyone else.
  • Nothing from the file is saved in your browser. Closing the file or the tab releases it from memory.

The same applies to the sample database: it is a public file (the Chinook demo database) downloaded from our viewer origin and opened the same way.

Why the viewer runs on its own address

The viewer you see on the home page is a separate page served from app.opensqlite.com and embedded in a frame. Browsers strictly separate pages on different origins, so nothing running on the main site's pages can read what happens inside the viewer, including your file.

The viewer page itself:

  • has no ads, no analytics and no third-party scripts;
  • has a Content Security Policy that only lets it connect to its own origin, so even a bug couldn't send your data elsewhere;
  • exchanges only display signals with the main page (light or dark theme, the size of the frame, and the browser's Back button), never anything taken from your file.

Check it yourself

You don't have to take our word for it. In Chrome, Edge or Firefox on a computer:

  1. Open the home page and open the developer tools (F12, or Cmd+Option+I on a Mac).
  2. Go to the Network tab, turn on Preserve log and clear the list.
  3. Open your database and browse it: switch tables, sort, search, open a row.
  4. Look at the list. The only requests you may see are the viewer's own code from app.opensqlite.com: a script named worker-….jsand SQLite itself, sql-wasm-….wasm, often served from your browser's cache. They are downloads: none of them sends a request body.

For a stronger test, load the home page, then disconnect from the internet (or set the Network tab's throttling to Offline) and open a file. It still opens, because nothing needs the network.

What we do collect

Hosting logs

The site is hosted on Cloudflare. Like any web host, Cloudflare processes technical details of each request (such as your IP address, browser and the page you asked for) to deliver the site and protect it from abuse. We don't use these to identify you.

Analytics

The main site (not the viewer) uses Cloudflare Web Analytics to count page views. It records the page visited, the referring page, and the browser, device type and country derived from the request. It sets no cookies, doesn't fingerprint your device and doesn't follow you across other sites. It never sees your database file.

Email

If you email us, we receive your address and whatever you write, and use them only to reply. We keep the conversation for as long as it's useful for that and delete it on request.

Cookies and local storage

We don't set cookies. If you choose light or dark mode with the switch in the header, that choice is stored in your browser's local storage on opensqlite.com so it's remembered next time. It never leaves your device; clearing your browser's site data removes it.

Your rights

The only personal data we hold is email you send us. Wherever you live, you can ask us what we hold about you, or ask us to correct or delete it, by writing to hello@opensqlite.com. If you are in the EU or UK, our legal basis for hosting logs and analytics is our legitimate interest in running a secure, working site, and you can also complain to your local data protection authority.

Changes to this policy

If anything here changes, for example if the main site starts showing ads, we'll update this page and the date at the top before the change takes effect. The viewer will always stay free of ads, analytics and third-party scripts.