MacroBridge Convert a workbook

Security

Last updated 26 October 2026. MacroBridge is run by Obegi Software LLC. Contact: [email protected].

Your workbooks hold your business's numbers and the code that runs on them, so here is exactly what happens to a file you send us, and what we do not claim. Everything on this page is what the code does today, and automated tests check each point every time the code changes.

In short

  • Encrypted in transit. Every connection to the site uses https (TLS).
  • Encrypted at rest. Your files, and the code read from them, are stored encrypted with AES-256.
  • Read, never run. Nothing on our servers runs your macros.
  • Deleted on a timer. Your uploaded workbook is deleted 60 minutes after upload if you place no hold, and 72 hours after it at the latest, or straight away when you press "Delete my file now".
  • No account. No sign-up and no password.
  • Card details go to Stripe. They never reach our server.
  • No file contents in our logs.
  • Hosted in the United States, on Railway, with Cloudflare in front.

In transit

The site is served only over https. A visit to the plain http address is redirected to https, and the site tells your browser to use https for it for the next year (HSTS), so later visits never start unencrypted. The connection from your browser is encrypted with TLS: that is what the padlock in the address bar shows.

At rest

Every file you send is encrypted before it is written to disk, with AES-256-GCM, and is decrypted only in the server's memory, for the moments it is being read for your report, your conversion or your download. That covers:

  • the workbook you upload;
  • the code read from it, and the report made from it, in our database;
  • the files you send for a macro check-up, and the check-up's report;
  • the download a paid conversion makes: your converted code, a macro-free copy of your spreadsheet and the report.

Each file is encrypted with its own random value and sealed to your job, so a file moved to another job, or changed by a single bit, will not open. The key is kept apart from the files, so a copy of the disk on its own cannot be read.

A few details are stored without that extra layer, because the site shows them back to you, needs them to reach you, or must keep them as the record of an order: your file's name and size; the names of its sheets and code modules; the email address you give Stripe; the name and company on a check-up order; and, when you accept a price, the time, your IP address and your browser's name. They are kept in the same database, which is not reachable from the internet.

Your macros are never run

MacroBridge reads your workbook as data. It does not open it in Excel or in any other program, and nothing on our servers runs your VBA code: a macro set to run when the file opens (Auto_Open, Workbook_Open) does nothing here. The conversion writes new Apps Script code as text, and we check that the text is valid by compiling it, never by running it. Links to other workbooks are never followed, and objects embedded in your file are never opened: they stay in your spreadsheet exactly as they were.

The converted code runs only when you run it, in your own Google Sheet.

Reading is limited too. Each upload can be at most 25 MB; a file that would unpack to far more than any real workbook is refused before it is unpacked (a .zip sent for a check-up may unpack to at most 200 MB); and the first reading of an upload, and each file of a check-up, runs with a time limit and a memory limit, so a damaged or hostile file is stopped rather than allowed to run on.

When your files are deleted

Your uploaded workbook, and the code read from it

  • If you place no hold: Deleted 60 minutes after you upload it.
  • If you decline the result, or do not answer it: Deleted, with everything made from it (the converted files and the report), when you press "Decline", or 24 hours after the result if you do not answer.
  • If you accept and pay: Deleted 72 hours after you uploaded it, at the latest.
  • At any time: Press "Delete my file now" on your page: the workbook and the code read from it go at once, and so does everything else made from it when nothing was bought.

What a conversion makes

  • The download (the converted code, a macro-free copy of your spreadsheet and the report): Kept 14 days after you pay so you can download it, then deleted. Deleted at once if the payment is refunded.
  • The report: If nothing in the workbook converts, kept 72 hours from the upload in case you want to buy it, then deleted. Once you have bought it, kept at its private address; write to us and we will delete it.

A macro check-up

  • The files you send: Deleted the moment the report is made. If your upload link (good for 14 days) runs out before you finish, whatever was sent is deleted then.
  • The check-up report: Deleted 30 days after it is ready, or at once when you press "Delete this report" on its page.

The sweeps that do this run every 5 minutes and every 60 minutes, so each deletion happens within that time of its deadline. Every night a further sweep deletes anything an interrupted upload or a crash left behind, so a file cannot outstay its time because something went wrong.

No account

There is no sign-up, no password and nothing to log in to. Your report's private address is its key: it carries a random identifier of 122 bits, which cannot be guessed, and nothing on the site lists it. Keep the address to yourself, because anyone who has it can open the report. Check-up links work the same way, with 256 random bits; we store only a fingerprint of each, so even our database cannot rebuild one, and each stops working when its time runs out.

The site's forms only work from the site's own pages: a request sent from another website is refused. The pages load no scripts, fonts or images from anywhere else, and there is no tracking.

Payments

When you pay, you pay on Stripe's own checkout page. Your card details go to Stripe and never reach our server. From Stripe we keep the payment's reference, its amount and the email address you gave for the receipt.

Logs

Our server does not log your requests. Its own log lines never include your file's contents, your code, your file's name or your email address, and an automated test runs the whole site and checks everything it writes for them. Railway, which hosts the site, keeps ordinary request logs (IP address, time, the address requested, browser) for a limited period, for security and debugging.

Where it runs

The site runs on Railway, in its US West region: your files and our database are stored there, in the United States. Cloudflare sits in front of the site: your connection reaches us through Cloudflare's network, which also screens the traffic for attacks. Email is delivered by Resend and payments are taken by Stripe; the privacy page says who handles what.

What we do not claim

  • MacroBridge has no SOC 2 report and no ISO 27001 certificate, and has had no formal security audit or outside penetration test. It is a small service, run by Obegi Software LLC.
  • No online service can promise that nothing will ever go wrong. What this page promises is what the code does, and that each point is tested.
  • While your file is being read it is, for those moments, decrypted in the server's memory. That is what reading it means.

Before you upload

  • Keep your own copy. Nothing we do changes the file on your computer, but keep a backup of any workbook that matters, as you would before any change to it.
  • Leave out what you cannot share. Do not upload a workbook holding information you are not allowed to share with another company, such as other people's personal details, passwords, or data under a confidentiality agreement. MacroBridge only needs the macros: save a copy, delete the sensitive sheets or values, and upload that.

Questions, or a security problem

Write to [email protected]. If you think you have found a security problem, put "Security" in the subject line. The same address is in our security.txt.