Privacy, demonstrated

Your email never leaves your computer.

This is an architectural rule, not a promise that depends on us remembering to delete a server copy later.

  1. 1

    The app loads

    Your browser downloads the interface and email parsers.

  2. 2

    You choose a file

    The browser grants this tab access only to the file you selected.

  3. 3

    It is parsed locally

    JavaScript reads the file in your browser. The subject, body, recipients, and attachments are not sent to our servers.

  4. 4

    Hostile content is contained

    Email HTML is sanitized and rendered in a restricted frame. Remote images are blocked by default.

  5. 5

    Closing the tab ends the session

    The active email exists only in this browser tab. OpenThatEmail does not create a cloud copy.

Verify it yourself

Watch the network while opening a file.

  1. Open your browser's Developer Tools.
  2. Select the Network panel.
  3. Drop an MSG or EML file into OpenThatEmail.
  4. Confirm that no request contains your file or email content.

The only normal requests should be for the site's code, styles, and fonts. Loading a remote image from an email requires your explicit action.

Never transmitted

The private parts stay private.

  • Email body
  • Subject
  • Sender or recipients
  • Attachments
  • Filenames
  • Raw headers
  • Message IDs
  • Exact file size

Coarse product metrics

We measure whether a tool worked, not what you opened.

OpenThatEmail may record a format such as MSG, a success or error code, a broad time bucket, a broad item-count bucket, and browser family. It never includes filenames, exact file sizes, subjects, addresses, message IDs, headers, bodies, attachments, or search terms.

Open an email file locally →