Privacy Policy

Your email files

When you drop an .eml, .emlx or .msg file into the viewer, it is read and parsed by JavaScript running in your browser. The file's contents are never transmitted to this site's servers — the site is static pages with no upload endpoint. Everything lives in your browser's memory for the session and is gone when you close the tab. You can verify this: load the page, disconnect from the internet, and the viewer keeps working.

Remote content inside emails

Remote images, CSS, fonts, media and SVG references are blocked by default. Embedded CID images carried inside the file stay local and can still display. If you explicitly choose Load remote images anyway, the image host can receive your IP address, browser details, request time and any unique identifier in the image URL. That choice applies only to the selected email; remote CSS, fonts, media and SVG remain blocked. Ordinary links make no request until you click them.

What we don't collect

• No accounts and no sign-ups.
• No comments and no contact forms.
• Not your name or email address for using the tools — we never ask. Buying Pro is the one exception: the payment processor takes an email address so it can send your receipt and license key. That path is described below.
• Never the file you open. Nothing about it — filename, contents or attachments — is uploaded to this site, and there is no endpoint here that could receive it. There is one thing a session-replay tool can still see on your screen; it is spelled out under Analytics.

Analytics

This site uses Google Analytics 4 and Microsoft Clarity for aggregate analytics — which pages get visited and whether the tool works well.

What those tools see

• Which pages were viewed.
• Browser type.
• Approximate region.
• Counts, never content: how many files a conversion ran on, whether it finished, which button was pressed. No filename and no part of a file is ever put into one of those events.

What Clarity records, exactly

Clarity works by replaying the page as it was drawn on your screen, which is a real question for a tool you open private mail in, so here is exactly where that line sits. The message body renders inside a sandboxed frame the recorder cannot read into. And everything the viewer draws around that frame — the subject line, the From, To and Cc addresses, the file name, the attachment names, and the Plain text tab — sits inside a container marked with Clarity's data-clarity-mask attribute, which tells the recorder to capture the shape of those elements but not the text in them. So a replay shows that someone opened a message and which tab they clicked; it does not show whose message it was or what it said. If you would rather not rely on that, blocking clarity.ms stops the recording outright and the viewer behaves exactly the same without it; how to do that is under Your rights over this data below.

Advertising

Advertising services use browser data separately from the email files processed by this tool. Third party vendors, including Google, use advertising cookies to select ads using browsing activity across participating websites. Google and its partners use these cookies for personalized advertising. These are the providers' advertising practices; this explanation does not mean that Google AdSense is currently enabled on EML Tool. This site's current analytics services are described in the Analytics section above. You can manage personalized advertising through Google Ads Settings and participating providers' choices at https://www.aboutads.info/choices/. These settings concern advertising identifiers, not the contents of emails opened in the viewer. Email-file processing remains on your device.

Pro payments and who you pay

Pro payments are processed by Stripe through its Managed Payments service. At checkout, Stripe (via Link) is the seller of record — the checkout page shows "Sold through Link", and a bank statement may show a descriptor starting with LINK.COM*. Applicable VAT or sales tax is calculated and remitted by Stripe. The price shown on this site is the full amount you pay, tax included. The 30-day refund described in the Terms of Useis unchanged; a refund request may also be handled with Stripe's help.

Your rights over this data

If you are in the EU or UK, the GDPR gives you rights over personal data about you. If you are in California, the CCPA as amended by the CPRA does. This section says what data exists here, what those laws let you ask for, and what actually works. It is a description, not a compliance badge — one person runs this site, and the honest answer to most of these requests is that the data is held by Google, Microsoft or a payment processor rather than by us.

What personal data exists at all

• Analytics identifiers. Google Analytics 4 and Microsoft Clarity load on every page and set their own identifiers in your browser. What they collect sits on their systems under their policies; we see their dashboards and cannot look up an individual visitor.
• A Pro purchase.Checkout runs on the payment processor's own hosted page — Stripe, or LemonSqueezy where it is merchant of record. Card details go to them and never touch this site. The processor hands back an email address and order reference so the receipt and license key can be sent; delivery of that email goes through Resend, and where that is not in use the processor's own receipt covers it.
• Your license key, on your device.There is no account and no user database here. A key from the Stripe path is one we sign ourselves, carrying the order reference, email, tier and purchase date inside it — which is why nothing has to be stored on our side; a LemonSqueezy key is issued and checked by LemonSqueezy instead. Either way it lives in your browser's local storage until you clear it, and it is sent back to be checked when you activate it and periodically after that. Checked, not filed.
• Server logs. The site is hosted on Vercel, which keeps ordinary request and function logs for running the service.
• Not the files themselves.No email you open is uploaded — there is no endpoint for one to go to. The single qualifier is Clarity's session replay, which can capture what the viewer prints on the screen; that is set out under Analytics above.

How long any of it is kept

We do not publish a retention schedule because we do not hold the copy. How long the data is kept is set by each service's own policy: Google, Microsoft (Clarity), Stripe, LemonSqueezy, Resend and Vercel.

EU and UK visitors (GDPR)

You can ask for:

• Access — a copy of personal data held about you.
• Rectification — correction of anything wrong, such as a mistyped email on an order.
• Erasure — deletion of it.
• Restriction — that it be held but not used while something is disputed.
• Objection — that we stop processing it, including for analytics.
• Portability — what you gave us, in a machine-readable form.

One limit worth stating plainly: analytics data here is not tied to a name, so we cannot find "your" rows in it on request — there is nothing to match you against. For that data the effective route is blocking it in the first place, below. Order data is different: give us the order reference or the email you paid with and it can be looked up with the processor. You can also complain to your national data protection authority, or the ICO in the UK.

California visitors (CCPA/CPRA)

• Right to know what personal information is collected, why, and who it goes to — the list above is that answer.
• Right to delete personal information, and to correct it.
• Right to opt out of the sale or sharing of personal information.
• Right to limit the use of sensitive personal information — none is collected here.
• Right not to be discriminated against for exercising any of these.

On selling and sharing, specifically: We do not sell personal information for money. Google Analytics 4 and Microsoft Clarity receive the analytics data described above. Advertising-cookie practices and personalized-advertising choices are explained in the Advertising section. Those choices concern browser identifiers; they do not give advertising providers access to email-file contents processed locally by this tool. To ask about your personal information or applicable opt-out rights, use the contact details below. We keep this policy aligned with the services configured on the site.

Non-discrimination is easy to honour here: the tools are free, there is no account, and blocking analytics changes nothing about what you can do on this site — Pro included.

What you can do right now, without asking us

• There is no cookie banner here and no consent prompt — the analytics scripts load on every visit. The practical control is your browser: any content blocker, or blocking third-party cookies, stops googletagmanager.com and clarity.ms from loading. Everything on this site keeps working, because the parsing never used the network — the same reason the viewer still works with your connection switched off.
• Google also publishes a browser add-on that opts you out of Analytics everywhere: Google Analytics Opt-out.
• To remove the license record from your device, use Deactivate license on the Pro page, or clear this site's data in your browser.

Making a request

Write to the address on the contact page and say which right you are exercising. One person reads that inbox — there is no ticket queue and no automated portal, so we are not going to quote you a response time we cannot keep. For an order, include the order reference or the email you paid with; without one of those there is no way to tell which record is yours. An authorised agent can make a request for you if you say so in the message.

Third-party links

Emails you open may contain links, and some pages here link out to other sites. Once you click through, the destination's own privacy policy applies — EML Tool has no control over what those sites do.