Privacy notice
Privacy notice
sub-hunt.com is built around a single promise: your email content never leaves your browser. Beyond that, the only third-party scripts we run (Google Analytics and Google AdSense) load only after you opt in via the cookie banner — declining means literally no tracking scripts inject.
What we collect
Nothing about your inbox. When you scan a .mbox file, parsing and classification happen entirely in your browser, inside a Web Worker. The file, its contents, sender lists, subjects, amounts, and any classifications we produce never leave your device. You can verify this in your browser's network tab — no requests to our servers are made during a scan.
Aggregate analytics. If you accept the cookie banner, we use Google Analytics to count pageviews and a small number of event names. Events never include email content, sender lists, or anything derived from your scan. Decline the banner and no analytics scripts ever load.
Cookies and tracking
Until you click Accept on the cookie banner, no Google Analytics, no Google AdSense, no advertising or analytics cookies are loaded. The banner stays visible until you choose. Decline is just as valid as Accept — the scan flow doesn't depend on either. Your choice is stored in your browser's localStorage under the key "subhunt.consent".
Who else sees data
We rely on the following third-party services as data processors:
- Our donation link goes to a third-party payment processor (e.g. Stripe via a Payment Link). If you donate, that processor collects your payment information directly; we never see card numbers and do not retain donor records.
- Google Analytics — see above; aggregate counts only, loaded only after you accept the cookie banner.
- Google AdSense serves ads on this site to keep it free. Ads (and their advertising cookies) only load after you accept the cookie banner; declining means no AdSense script loads at all.
We do not sell, share, or transfer your data to any other third parties beyond these processors.
How long we keep things
- Email content from a scan: zero seconds, since we never have it.
- Analytics events: per Google Analytics's retention policy; aggregate only, and only collected if you accept the cookie banner.
Your rights (GDPR)
- Access — by design, we have no personal data to disclose. Email parsing runs entirely in your browser and we never receive scan content. If you accepted the cookie banner, Google Analytics holds aggregate page-view data per their retention policy; you can clear it from your browser at any time.
- Deletion — there is nothing on our side to delete; everything sensitive stays in your browser by design. To clear the consent choice, clear your browser's localStorage for this site.
- Portability — there is essentially nothing personal to port; everything sensitive stays in your browser by design.
- Complaint — you have the right to lodge a complaint with your country's data protection authority.
Contact
Issues, questions, or to exercise your rights: contact@sub-hunt.com.
This is a plain-language summary written by sub-hunt.com's authors, accurate to how the service works today. It is not legal advice and will be reviewed before public launch.