Privacy

Your emails

The conversion runs entirely inside your browser. Emails, attachments and the files it produces are written to your own computer. They are never sent to us or to anyone else. Our page contacts only Microsoft or Google (to sign you in and read your mailbox at your request), Creem (payments) and our own small service described below.

Pictures in emails

Many emails show pictures that are not inside the email but hosted on the sender's server. Your browser cannot read those from another website directly, so the page asks our service to fetch each picture and pass it straight back. The picture address is the only thing our service sees; it stores nothing, logs nothing and never sees the email itself.

What our service stores

To remember free PDFs used and paid plans, our service keeps one record per mailbox, keyed by a one-way hash of the mailbox address: how many free PDFs were used, which plan is active and until when, and Creem's subscription identifiers. It stores no email content, no names and no address in clear text. Anonymous daily counters (runs started, runs completed, downloads) carry no personal data.

Payments

Payments are handled by Creem, our merchant of record. Your mailbox address is passed to them as the receipt email. Card details go to Creem only; we never see them. If you start a checkout and do not finish it, Creem may send you a few reminder emails about it; write to support@emails2pdf.com and we will stop them.

Microsoft sign-in

Signing in with Microsoft grants this page permission to read your mailbox in your browser. You can remove that permission at any time at account.microsoft.com (Privacy, Apps and services). Sign-in tokens are kept in your browser session only.

Google sign-in (Gmail)

Connecting Gmail asks Google for read-only access to your mail (gmail.readonly) and your email address. The page uses that access, in your browser, only to list your labels and messages and read the messages you chose to export, so it can turn them into files on your computer. Nothing from Gmail is sent to our service, stored by us, shared with anyone, used for advertising, or read by a person. The access token stays in your browser tab and is discarded when it closes, or at once when you sign out. You can remove the permission at any time at myaccount.google.com/permissions.

Emails2PDF's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How your data is protected

• Processing stays on your device. Emails, attachments and the files made from them are read and converted inside your browser and written to your own computer. They are never sent to our service or stored by us.
• Least access. Gmail is connected with read-only access; Outlook with the Mail.Read permission. Emails2PDF cannot send, change, label or delete mail.
• Encrypted connections. Every page and every request uses HTTPS (TLS), and the site tells browsers to accept nothing else (HTTP Strict Transport Security).
• Locked-down page. The tool page's security policy only allows it to connect to Microsoft, Google and our own service, so mail data cannot be sent anywhere else, even by mistake. Payment happens on our payment provider's own page, in a separate tab.
• Sign-in tokens stay in your browser tab. They are kept in the tab's session storage, never sent to our service except the sign-in ID token used to recognise your mailbox, and discarded when the tab closes. Signing out also asks Google to revoke the Gmail token at once.
• No addresses on our side. Our service identifies a mailbox only by a one-way SHA-256 hash of its address. Its records are held by Cloudflare, encrypted at rest, and only the developer can access them.

How long data is kept, and how to delete it

• Google user data (Gmail messages, attachments, labels): never stored by Emails2PDF. While an export runs, and until you download it, the converted files are kept in your browser's private storage on your own computer so an interrupted export can resume. They are deleted from there when the download is saved, when you start another export, or when you sign out. The files you download are yours and stay on your computer until you delete them.
• Sign-in tokens: deleted when the browser tab closes or when you sign out.
• Remembered address: so you can continue with one click next time, your browser (not our service) remembers which mailbox you last connected. Sign out or choose Use a different account to delete it.
• Our mailbox record (the address hash, free PDFs used, plan and payment-provider identifiers): kept while you use Emails2PDF. Write to support@emails2pdf.com from the mailbox concerned and we delete it within 30 days. A checkout reference expires after 400 days; a record that an export was unlocked expires after 60 days.
• Pictures fetched for PDFs: passed straight through, never stored or logged.
• Anonymous counters (for example, exports started per day) contain no personal data and are kept for statistics.
• You can withdraw Emails2PDF's access at any time: Google at myaccount.google.com/permissions, Microsoft at account.microsoft.com (Privacy, Apps and services).

Contact

support@emails2pdf.com