Privacy policy
Effective 2026-08-07
This policy covers TableauOps, the ext·host service at ext.tableauops.com and the Tableau
extensions we publish, including those listed on the Tableau Exchange. The short version:
your workbook data never reaches us, our extensions contain no trackers, and the little we
do store is listed below.
Inside our extensions (Radial Spike Chart and others)
Your workbook data stays in your browser.
Tableau hands data to an extension inside the embedded browser, over the Extensions API.
It is never sent to our servers, we serve the extension's HTML, JavaScript and CSS, and
hold no Tableau credentials. There is nothing on our side to look at.
- Our extension files contain no analytics, no cookies, and no third-party trackers.
- Settings you configure (colors, labels, arc span) are saved by Tableau in your
workbook, not with us.
- When Tableau Cloud or Server loads a hosted extension, our server sees a standard web
request and records the hostname of the embedding Tableau site (e.g.
acme.online.tableau.com), a count, and a timestamp, never
workbook content. Tableau Desktop reports nothing at all. We do not store IP addresses
or browser fingerprints in these records.
On this website
- Accounts: your email address and username; that's the whole account. Sign-in is
a 6-digit emailed code; we store only a hash of it, and it's deleted within a day.
- Downloads and loads: which extension a .trex download
or load belonged to, when, and the referring hostname where the browser sends one.
Deleted after 180 days.
- Site analytics: our own pages load PostHog to record page views and in-app
actions, tied to your account once you sign in. The extensions we host and publish
carry none of this.
- AI builder (beta), if enabled on your account: your prompts, generated code,
and whether you kept the result. A CSV you preview against is parsed in your browser;
only field names and types reach us, never your data values.
- Mailing list: an email you leave on the contact form, with the page it came
from, used for the updates you asked for. Unsubscribe links are in every email.
The full plain-English inventory, written from the database schema, is at
Your data, plainly.
Services we rely on
- Railway: hosts the application and database.
- Mailgun: delivers login codes and emails you asked for.
- PostHog: site analytics, on our own pages only.
- Gumroad: handles payment for paid products; we never see card details.
- Anthropic: powers the AI builder beta; receives prompts and field names/types,
never your data values.
What we don't do
We don't sell or rent your information, we don't run ads, and we don't put tracking of any
kind inside the extensions you or your users load into Tableau.
Deletion and questions
Email eric.summers@vizyourdata.com to have
your account and its records deleted, or to ask anything this page doesn't answer. When this
policy changes in a way that matters, the date above changes with it.