Skip to content

Privacy Policy.

Your data never leaves your device. This policy explains exactly why.

Last reviewed: September 16, 2026

Information We Collect

None. Email Extractor is a fully client-side application. We do not collect, store, transmit or have access to any personal data, email addresses, file contents or usage analytics.

  • No account creation or login is required.
  • No personal information is requested at any point.
  • No cookies are set beyond a single ee-theme preference in localStorage (see below).

How We Process Data

All processing happens entirely within your browser. When you paste text or upload a file, the following occurs locally on your device:

  1. Your content is read by JavaScript running in your browser tab.
  2. A local Web Worker parses, validates and transforms the data using your device's CPU.
  3. Results are rendered in the page and made available for copy or download.
  4. No pasted text, file contents or tool results are transmitted to our servers or any third party.

You can verify this yourself: open your browser's DevTools Network tab and run any tool. The browser may fetch a local worker or file parser from this site, but no request contains your pasted text, file contents or processed results.

Cookies & Tracking

Email Extractor does not use:

  • Analytics cookies (Google Analytics, Plausible, etc.)
  • Advertising or remarketing pixels
  • Fingerprinting or device identification scripts
  • Social media tracking widgets

The only local storage used by default is a single key (ee-theme) that remembers whether you prefer dark or light mode. This value never leaves your browser and is not transmitted anywhere. A second key (ee-history-vault) exists only if you enable the optional encrypted run history below.

Third-Party Services

We do not integrate with any third-party services that process your data. All fonts are self-hosted via@fontsource packages. Even font requests do not reach external servers.

The site is deployed as static HTML, CSS and JavaScript on Cloudflare's CDN. Cloudflare may log standard HTTP request metadata (IP address, user agent, request time) for CDN operation, but this data is never associated with tool usage and is governed by Cloudflare's own privacy policy.

Optional Mail-Server Check

The Validator offers an opt-in "Check mail servers" button that looks up each domain's MX records over DNS-over-HTTPS. This is theonly feature on the site that makes a third-party request, and it runs only when you click it — default validation stays fully offline.

  • Only domain names (e.g. acme.com) are sent — never full addresses, pasted text or file contents.
  • Queries go to a DNS provider (Cloudflare, with Google as fallback) to ask whether the domain publishes mail servers.
  • Unreachable DNS never changes a verdict: unknown domains keep their offline result.

To verify, open DevTools before clicking: you will see requests only to the DNS provider's lookup endpoint, containing domain names and nothing else.

Optional Run History

Each tool offers an opt-in encrypted history. It is off by default: nothing is stored unless you enable it with a passphrase. When enabled, run inputs and results are sealed with AES-GCM-256 (PBKDF2-derived key) under theee-history-vault key in your browser's localStorage.

  • Entries expire automatically after 30 days; at most 20 runs are kept.
  • We cannot read your history — forgetting the passphrase locks it permanently.
  • "Forget everything" deletes the vault, including its encryption salt.
  • Clearing browser storage removes the vault like any other site data.

Data Retention

We retain no user data because we never receive it. When you close your browser tab, all processed content is gone. There is no database of user uploads, no log of extracted emails and no history of tool usage on our end.

GDPR Compliance

Because all data processing happens on your device and no personal data is transmitted to us, Email Extractor is designed to beGDPR-friendly by architecture. You remain the sole data controller at all times — there is no data processor involved.

  • No Data Processing Agreement (DPA) is needed because we process nothing.
  • No cross-border data transfer occurs because data never leaves your device.
  • No data subject access requests (DSARs) apply to us because we hold no data.

This makes Email Extractor suitable for processing sensitive material — HR exports, client contracts, research datasets — that you could never safely paste into a hosted tool.

Children's Privacy

Email Extractor does not knowingly collect any personal information from anyone, including children under the age of 13. The tool processes data entirely in the browser and requires no account or personal details.

Changes to This Policy

If we update this privacy policy, the revised version will be posted on this page with an updated "Last reviewed" date. Since we collect no data, changes to this policy will never affect how your data is handled — because we never handle it.

Contact

Questions about this privacy policy? Reach us athello@emailextractorai.com.