Local first, and plain about the exceptions.
DataBridge keeps your files and definitions on your device or your own servers. This page lists where each edition stores your work and every kind of traffic that leaves it. Our legal terms are in the Privacy Policy.
Three editions, three places.
- Templates and mappings are saved in IndexedDB in your browser, on your device. The browser can clear them, so export a backup now and then.
- Files you open are read in the browser and are not uploaded.
- A service worker keeps a copy of the app, so it runs with no network after the first load.
- No installer: Desktop is a single program you can run from any folder.
- Your work stays on that PC, under your Windows profile, in a local database at
%LocalAppData%\DataBridge\databridge.db. Saved passwords are encrypted so only your Windows account on that PC can read them. - To use your templates on another PC, export and import them; saved passwords are not carried over and are entered again there. To share them across people and machines, use Server.
- The free tools work offline. Paid modules keep working for up to 14 days after the last successful license check, then Desktop runs as Free until it reaches the License Server.
- It is a desktop window, not a web server. It does not listen for connections, so nothing reaches it remotely.
- The web app and its API run on your own Windows server with IIS, on your own SQL Server. Your data stays on your infrastructure.
- Templates, mappings, connections, jobs and users are shared with your team at a URL your organization controls.
- Schedules run unattended, whether or not anyone is signed in.
Single machine by design, portable in one sense.
Templates, mappings, connections, destinations, saved queries and jobs on one PC are not available on another. Move them with Export and Import, which writes one JSON file. Passwords, API keys and authorization headers are not written to that file, so you enter them again after importing. Imported jobs are switched off until you enable them, and run history is not included.
If you attach Desktop to your own DataBridge Server, the Server Transfer page copies work one way between the two, after a preview. It never overwrites a record with the same name, and passwords are never copied.
Desktop is a zip you unzip and run, with no installer. It is not a portable-data app: the database lives in your Windows user's local application data folder, not beside the program, and its saved passwords are encrypted with a key tied to your Windows account. Create backup writes a copy of the database to the Backups folder in that same data folder. Copy that file to move or protect your data.
Every kind of traffic, itemized.
No edition includes usage analytics. Apart from what you configure yourself, nothing else leaves.
| Edition | Goes to | When | What it carries |
|---|---|---|---|
| Free browser | app.extensibilityco.com | When the app loads | The app's own files. No data of yours. |
| Free browser | The ExtensibilityCo License Server | Only when you use an account page: create an account, sign in, reset a password, open Upgrade, or use the Roadmap page. While you are signed in, also when the app loads, to confirm your plan. | Your email and password at sign-in, a company name if you enter one when you create an account, a device ID kept in your browser, a sign-in session token, and plan and price lookups. The Roadmap page loads the public roadmap. |
| Free browser | Stripe | Only when you choose to buy. Upgrade sends your browser to Stripe's checkout page. | Payment details are entered on Stripe's page. |
| Free browser | The ExtensibilityCo License Server | Only when you click Send on the feedback page, after you see a preview of exactly what will be sent. | Your message, an optional email address, the edition, the app version and the platform. Never your templates, mappings or files. |
| Desktop | The ExtensibilityCo License Server | When you sign in, and periodically while Desktop is open and signed in. | Your email and password at sign-in, a device ID made from this PC's name and a short hash, and check-ins that confirm the modules you own. |
| Desktop | The ExtensibilityCo License Server | About every 12 hours while Desktop is open. Set the DATABRIDGE_DISABLE_UPDATE_CHECK environment variable to turn it off. | The product name, and nothing else. Not your account, your device or your version. |
| Desktop | The ExtensibilityCo License Server | Only when you click Send on the feedback page. | The same preview-first feedback as the browser edition. |
| Desktop | Your own DataBridge Server | Only if you attach Desktop to a Server. | Templates, mappings, connections, jobs, run history and data you process in the Server's modules go to that Server, under your organization's control. |
| Server | The ExtensibilityCo License Server | When the Server starts, and periodically after that. | The activation account's email and password at sign-in, a device ID, the Server's machine name, and check-ins that confirm your modules. |
| Server | The ExtensibilityCo License Server | Periodically, to look for a newer release. | The product name, and nothing else. |
| Server | The ExtensibilityCo License Server | Only when someone clicks Send on the feedback page. | The same preview-first feedback as the other editions. |
| Desktop and Server | Wherever you configure a source or destination | When a job, pipeline or manual run uses it. | The data you chose to move. This is not sent to ExtensibilityCo. |
| The browser edition's Content Security Policy allows connections only to the app's own address and the License Server, and a test fails if that list grows. | |||
Data goes where you point it.
Jobs, pipelines and destinations send data to the servers, folders and APIs you configure. That is the product. Encryption in transit depends on the destination type and how you set it up.
| Destination | Encrypted in transit |
|---|---|
| SFTP | Yes. SFTP runs over SSH, and you can pin the server's host key. |
| FTP and FTPS | Only when FTPS is on. Tick Use SSL on a destination, which starts TLS with AUTH TLS. Plain FTP is not encrypted. A source with a username and password refuses plain FTP unless the server is this machine. |
| HTTP and REST APIs | Yes for an https:// address. An http:// address is not encrypted, and a source refuses to send authentication or custom headers over it. |
| Email through SMTP | Yes with TLS: implicit TLS on port 465, STARTTLS on port 587 or when Use SSL is ticked. DataBridge refuses to send SMTP credentials on an unencrypted connection. |
| Email through Microsoft 365 | Yes. Messages go through the Microsoft Graph API over HTTPS. |
| Amazon S3 | Yes by default, over the AWS SDK's HTTPS endpoint. For an S3-compatible store you enter the address, so use https://. |
| Azure Blob Storage | As set by the connection string you enter. Use one that specifies https. |
| Local or network folder | DataBridge writes to the path you give it. Whether the transfer to a network share is encrypted depends on that share, not on DataBridge. |
| DataBridge cannot encrypt a connection that the other end does not support. Choose the encrypted option wherever the destination offers one. | |
Privacy questions.
Does the free browser edition upload my files?
No. Files you open are read in the browser and are not uploaded. The page can connect only to its own address and the ExtensibilityCo License Server, which it contacts for accounts, plans, the roadmap and feedback you send, never for your files.
Where does the browser edition store my work?
In IndexedDB in your browser, on your device. The browser can clear it, so export a backup with Export and Import now and then.
Does DataBridge Desktop work offline?
The free tools do. Paid modules keep working for up to 14 days after the last successful license check, then Desktop runs as Free until it reaches the License Server again.
Can I use my Desktop templates on another PC?
Not automatically. Desktop is single-user and keeps its work on one PC. Export and Import moves templates, mappings and more in one JSON file, without passwords. If you attach Desktop to a DataBridge Server, Server Transfer copies work one way after a preview.
Does DataBridge send my data to ExtensibilityCo?
No. Only account sign-in and license check-ins, a release check that sends the product name, and feedback you choose to send go to ExtensibilityCo. Jobs send data only to the destinations you set up.
Is data encrypted in transit?
When the destination supports it and you choose it: SFTP, FTPS, https:// addresses, SMTP with TLS, Microsoft 365 and Amazon S3 by default. Plain FTP and http:// addresses are not encrypted.
Check it with your own files.
Open the free browser edition and watch the network tab in your browser's developer tools while you work.