Privacy Policy

Online Email Viewer operates on a 100% in-browser, client-side processing model.

When you select or drop a file (.pst, .ost, .mbox, .msg, .eml, or winmail.dat) into the viewer, the file is read directly from your local disk into your browser's memory using the standard HTML5 File API, chunked byte slicing, and isolated client engine contexts.

• Zero bytes of your archive are ever transmitted to our web servers or any cloud endpoint.
• Zero email content, subjects, sender names, message bodies, or attachments leave your device.
• Closing the browser tab or clicking Close File terminates active parser routines, detaches the engine context, and explicitly releases all in-memory object references, leaving the parsed email structures and binary buffers eligible for immediate browser garbage collection.

Like virtually all websites on the internet, our hosting infrastructure records standard HTTP server request logs when your browser requests the HTML, CSS, JavaScript, and icon files needed to run this application.

These logs may include:

• Your public IP address.
• Browser user-agent string and operating system version.
• Requested resource path (e.g. /, /mbox-viewer, /favicon.ico).
• Timestamp and HTTP response status code.

These logs are maintained strictly for network security, DDoS mitigation, and operational diagnostics, and are never correlated with any email files you view locally.

This application does not use server session cookies or account logins. We utilize the browser's localStorage API solely to preserve your non-sensitive UI preferences across sessions:

• omnipst_theme: Stores your preference for Light Mode or Dark Mode.
• omnipst_sidebar_width: Remembers your custom folder tree pane width.
• omnipst_list_width: Remembers your custom email message list width.

No email files, messages, or metadata are ever persisted in localStorage or IndexedDB.

Marketing and corporate emails frequently embed 1x1 tracking pixels and remote image URLs (e.g. https://tracker.com/pixel.gif) to detect when and where an email is opened.

To safeguard your IP address and reading habits, our viewer blocks all external remote images by default while safely rendering local embedded CID images in device RAM. Loading remote images is entirely optional and scoped strictly per message.

Outbound Network Requests: If you explicitly choose to click "Load Remote Images" for a specific message, or if you click an external link within email body text, your browser will send an HTTP request directly to the host hosting that resource or link destination. Those third-party hosts may log standard HTTP request metadata (such as your client IP address and User-Agent).

Workspace Isolation: All private viewing workspaces (under /workspace/*) are strictly ad-free and isolated from external marketing scripts.

Public Educational Guides: If Google AdSense or certified analytics are enabled on eligible public guide pages, third-party vendors (including Google) may use cookies or identifiers to serve ads based on prior visits to this or other websites. Users in applicable regions (such as the EEA, UK, and Switzerland) are provided standard Consent Management Platform (CMP) controls to accept or decline advertising cookies.

You can learn more about how Google handles information from partner sites at policies.google.com/technologies/partner-sites.

6. Operator & Contact Inquiries

For any questions regarding this Privacy Policy or data handling practices, contact our privacy engineering team at support@prismmigration.com.