Privacy Policy

Last updated: August 2026

The short version

Your mbox file never leaves your device. All parsing, viewing, searching, CSV export and PDF generation happen locally in your browser. Our servers never receive the file, any message, any email address from it, or anything you search for.

What we do NOT collect

• Your mbox file — it is read in small chunks by JavaScript running in your browser tab and is never uploaded.
• Message content — subjects, senders, bodies, attachments and search queries stay in your browser's memory and are discarded when you close the tab.
• Accounts and cookies — the site has no signup, and it sets no cookies.

What is stored on your device

If you purchase and activate a license, the license key and its activation timestamp are stored in your browser's localStorage (key mboxconvert_license) so you don't have to re-enter it. Clear your browser's site data at any time to remove it. Nothing else is persisted.

What is sent over the network

• Page & library loads. The site is static files served by our hosting provider (Vercel), and one open-source library (jsPDF) is loaded from jsDelivr. Like any web request, these providers may log your IP address and user agent per their own privacy policies.
• Anonymous usage statistics. We use Vercel Web Analytics, which counts page views and referrers without cookies and without collecting any file or personal data.
• Anonymous usage counters. Our server keeps running counts of tool events: a file was indexed (message count and file size only), a PDF was exported (message count), and client-side error codes. These are bare numbers — they never include message content, email addresses, file names, or search queries.
• License validation (paid users only). When you enter a license key, the key — and only the key — is sent to our serverless endpoint, which forwards it to Gumroad's license API to confirm validity. No mailbox data is ever attached to this request.
• Checkout (paid users only). If you buy a license, the transaction is handled by Gumroad under their privacy policy. We receive only an order confirmation and your email address for license delivery.

Data retention

Your mailbox data is never sent to us, so there is nothing for us to retain or delete. Anonymous usage counters (numbers only, as described above) are kept as daily aggregates and lifetime totals. License and order records are retained by Gumroad as required for accounting purposes.

Changes to this policy

If we ever change how data is handled, we will update this page. Any feature that would require sending file content to a server (we have none planned) would be opt-in and clearly marked before it affects you.

Contact

Questions about privacy? Email hello@mboxconvert.com or reply to your Gumroad receipt.