Privacy policy

Last updated October 25, 2026

The short version

The data you chart never leaves your browser. Chart Buffet has no accounts, no uploads and no server-side code that could receive a table. The site is funded by third-party advertising, which sets its own cookies. The detail follows.

Who we are

Blue Skua LLC operates chartbuffet.com ("Chart Buffet"). For data-protection purposes we are the controller of the limited personal data described below. Contact: support@blueskua.com.

Your data — not collected

Everything you paste, type or open — tables, files, titles, colours — is read and charted by JavaScript running on your own device. Files are read with the browser’s own file APIs, in memory. Charts are drawn and exported to images in your browser, and downloads are created locally. None of it is transmitted to us or to any third party, and we have no way to see it.

Because the site is served as static files, there is no endpoint on chartbuffet.com that accepts data at all. You can check this yourself: open your browser’s developer tools, watch the Network tab, and paste a table.

Browser storage

So that your work survives a reload, the chart you are working on — its table and settings — is kept in your browser’s localStorage under cb-project. It stays on your device, is readable only by this site in this browser, and is never sent to us. The “Clear data” button and clearing your browser’s site data both remove it. Two further entries hold preferences: cb-theme (light or dark) and cb-panels (which settings panels you keep open).

Accounts and payments — none

There is no sign-up, no login and nothing to buy, so we hold no account records, email addresses or payment data. If you email us, we hold only that correspondence.

Server logs

Cloudflare delivers the site on our behalf and logs technical request data — IP address, user agent, requested URL and time — for security, abuse prevention and diagnostics. These logs contain page requests only, never your chart data. Retention is governed by Cloudflare's policies.

Advertising

We show ads through Google AdSense. Google and its partners may use cookies or similar technologies to serve and measure ads, including personalised ads based on your activity on other sites. See policies.google.com/technologies/ads, and adjust what you see at myadcenter.google.com. Advertising scripts do not receive your chart data.

If you are in the EEA, the UK or Switzerland, you will be asked for consent before advertising cookies are set. The request comes from Google's certified consent management platform, which records your choice and signals it to advertising vendors under the IAB Transparency and Consent Framework. You can change it at any time through Cookie choices in the footer.

Legal bases

Where the UK GDPR or EU GDPR applies, we rely on:

• Legitimate interests — to keep the service secure and prevent abuse.
• Consent — for personalised advertising and any non-essential cookies.

Sharing

We do not sell personal data. The only processors involved are Cloudflare (hosting) and Google (advertising and its consent platform), each under its own terms and, where required, a data-processing agreement.

International transfers

Cloudflare and Google operate globally, so request data may be processed outside your country, including in the United States, under safeguards such as Standard Contractual Clauses or an adequacy decision.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal data, to portability, and to withdraw consent. California residents also have rights to know, delete, correct and opt out of sale or sharing; we do not sell or share personal information as the CCPA defines those terms.

To exercise a right, email support@blueskua.com. Since we hold no account or chart data, in most cases there is nothing of yours for us to retrieve. We will respond within one month. In the UK you may complain to the Information Commissioner’s Office; in the EEA, to your national supervisory authority.

Children

The site is not directed at children under 13 and we do not knowingly collect their personal data.

Changes

We will update the date above when this policy changes and announce material changes on the site.