Privacy Policy

Last updated: October 12, 2026

GeoFlow Tools ("the service", this website) enriches address lists with U.S. Census geography data. This policy explains exactly what data is processed and how. In short: we do not require accounts, we do not store your data, and we do not sell or share it.

1. Address inputs

When you paste or upload addresses, they are processed as follows:

• Address text you enter is sent over HTTPS to our server-side proxy, which forwards the request to the U.S. Census Bureau Geocoder (the official public geocoding API of the U.S. government, operated by the U.S. Department of Commerce).
• The proxy exists only to relay your request and return the response to your browser. Requests are not persisted: we keep no logs, no database records, and no copies of addresses or results on our servers.
• Timezone lookup is performed entirely in your browser using a local library — no data leaves your device for this step.

2. U.S. Census Bureau (third party)

Geocoding is performed by the Census Bureau Geocoder. Its privacy practices are governed by U.S. federal law and the Census Bureau's own policies (see census.gov). The Geocoder is a public-domain service; address data submitted to it is not combined with commercial tracking profiles. We do not send your email, identity, or payment information to the Census Bureau — only the address text needed for geocoding.

3. What we do NOT collect

• No accounts or sign-ups — nothing to register, nothing to profile.
• No address or result history — close the tab and the data exists only in your browser's memory until you download your CSV.
• No advertising cookies, no third-party analytics trackers, no fingerprinting.

4. Local browser storage

The service stores one small value in your browser's localStorage: a flag (gf_unlock) recording that you have purchased credits, so the app can restore your paid status on your next visit. This value stays on your device and is never transmitted anywhere except to verify a purchase you explicitly made. Aggregate, anonymous usage counters (e.g. "a conversion happened") are kept without any personal identifiers.

5. Payments

Paid credits are processed by our payment provider, Creem (Creem IO). When you purchase, you provide payment details directly to Creem; we never see or store your card number. Creem may send us your order ID and email solely to deliver and verify your purchase. Creem's own privacy policy governs its handling of your payment data.

6. Files you upload

CSV files are parsed in your browser. Their contents are not uploaded to our servers — only the individual address strings needed for geocoding are sent, as described in section 1.

7. Data retention and deletion

Because we do not store address data, there is nothing for us to delete. To remove the local unlock flag, clear your browser's site data for this domain.

8. Children's privacy

The service is a professional data tool not directed at children under 13, and we do not knowingly collect personal information from children.

9. Changes to this policy

If we change this policy materially, we will update the date above and, for significant changes, display a notice on the homepage.

10. Contact

Questions about this policy: [email protected]