Privacy Policy

Last updated: September 2026

The short version

Your email files never leave your device. All parsing, viewing and PDF generation happen locally in your browser. Our servers never receive the files, any message, any email address from them, or anything you type into the tool.

What we do NOT collect

• Your .eml/.emlx/.msg files — they are read by JavaScript running in your browser tab and are never uploaded.
• Message content — subjects, senders, bodies, attachments and the generated PDFs stay in your browser's memory and are discarded when you close the tab.
• Accounts and cookies — the site has no signup, and it sets no cookies.

What is stored on your device

If you purchase and activate a license, a signed license token (not the key itself) and its activation timestamp are stored in your browser's localStorage (key emlconvert_license) so you don't have to re-enter it. An anonymous random visitor ID (key vid) is also stored for usage statistics — it is a random UUID with no personal data. Clear your browser's site data at any time to remove them. Nothing else is persisted.

What is sent over the network

• Page & library loads. The site is static files served by our hosting provider (Vercel); every library the tools need (jsPDF, the .msg parser, the HTML renderer) is self-hosted from our own domain — no third-party CDN is involved at runtime. Like any web request, Vercel may log your IP address and user agent per its own privacy policy.
• Anonymous usage statistics. We use Vercel Web Analytics, which counts page views and referrers without cookies and without collecting any file or personal data.
• Anonymous usage counters. Our server keeps running counts of tool events: files were parsed (count and byte size only), a PDF was exported (message count, single or merged), and client-side error codes. Events also carry an anonymous random ID for usage statistics (the vid described above) plus a flag saying whether a license is active, so we can count unique visitors and tell free from paid usage — the ID is stored only as a SHA-256 hash. No personal data, and your files never leave the browser: these counters never include message content, email addresses, or file names.
• License validation (paid users only). When you enter a license key, the key — and only the key — is sent to our serverless endpoint, which forwards it to Gumroad's license API to confirm validity. No email data is ever attached to this request.
• Checkout (paid users only). If you buy a license, the transaction is handled by Gumroad under their privacy policy. We receive only an order confirmation and your email address for license delivery.
• Feedback you choose to send. The Feedback link opens a form delivered by Web3Forms: only the text you type and, if you fill it in, your reply email address are sent. Never attach or paste your email content — we cannot use it and do not want it.

Data retention

Your email data is never sent to us, so there is nothing for us to retain or delete. Anonymous usage counters (numbers only, as described above) are kept as daily aggregates and lifetime totals. License and order records are retained by Gumroad as required for accounting purposes.

Changes to this policy

If we ever change how data is handled, we will update this page. Any feature that would require sending file content to a server (we have none planned) would be opt-in and clearly marked before it affects you.

Contact

Questions about privacy? Email hello@emlconvert.com or reply to your Gumroad receipt.