Privacy notice
Privacy notice
sub-hunt.com is built around a single promise: your email content never leaves your browser. The site runs no Google Analytics, no advertising and no tracking scripts; the only measurement is Cloudflare's cookieless visit counter, which stores nothing on your device and cannot identify you.
What we collect
Nothing about your inbox. When you scan a .mbox file, parsing and classification happen entirely in your browser, inside a Web Worker. The file, its contents, sender lists, subjects, amounts, and any classifications we produce never leave your device. You can verify this in your browser's network tab — no data from your mailbox leaves your browser during a scan.
Visit statistics. We count visits with Cloudflare's cookieless visit counter: aggregate numbers only, with no cookies, no identifier and nothing stored on your device. There is no Google Analytics and no advertising on this site.
Cookies
sub-hunt.com uses no cookies, so there is no cookie banner. Your light or dark theme preference is kept only in your browser's localStorage, and there are no advertising or analytics cookies.
Who else sees data
We rely on the following third-party services:
- Our donation link goes to a third-party payment processor (e.g. Stripe via a Payment Link). If you donate, that processor collects your payment information directly; we never see card numbers and do not retain donor records.
We do not sell your data. The formal information at the end of this page lists every service that processes data on our behalf, including our host (Cloudflare) and our email provider (IONOS).
How long we keep things
- Email content from a scan: zero seconds, since we never have it.
Your rights (GDPR)
- Access — we never receive the content of your scans, because parsing runs entirely in your browser. If you have emailed us, we hold that correspondence and will send you a copy on request.
- Deletion — there is no scan data on our side to delete. We will delete any correspondence you ask us to, unless the law requires us to keep it.
- Portability — there is essentially nothing personal to port; everything sensitive stays in your browser by design.
- Complaint — you have the right to lodge a complaint with your country's data protection authority.
Contact
Issues, questions, or to exercise your rights: [email protected].
Formal data protection information (GDPR)
English translation for convenience; the Spanish version prevails.
Data controller
Mihail Mogildea (Navimirami), NIE Y4980514Q, Polígono 12, Parcela 216, 07140 Sencelles (Illes Balears). Contact: [email protected].
Purposes and legal bases
Hosting and security: Cloudflare processes technical data from each visit (IP address, browser, requested page) to serve the site and protect it against abuse. Legal basis: legitimate interest (art. 6(1)(f) GDPR).
Cookieless statistics: Cloudflare Web Analytics counts visits in aggregate, without cookies and without any visitor identifier. Legal basis: legitimate interest in knowing how many people use the site (art. 6(1)(f) GDPR). The site uses no other analytics tool and shows no advertising.
Messages: if you write to [email protected], your address and the content of your message are used only to reply to you. Legal basis: legitimate interest in answering your enquiry (art. 6(1)(f) GDPR).
Donations: payment is handled directly by the payment provider (Stripe), which acts as an independent controller of that data; the owner never receives your card details.
Recipients and international transfers
No data is shared with third parties unless the law requires it. The following process data on the owner's behalf: Cloudflare, Inc. (hosting, security and statistics) and IONOS SE (email). Cloudflare may process data in the United States and participates in the EU-US Data Privacy Framework.
Retention
Technical data is kept only for the short period Cloudflare needs to provide the service, and messages for as long as needed to reply to you and for the periods required by law.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to [email protected]. If you believe your request has not been handled properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Cookies and local storage
This site does not use cookies. It only keeps your light or dark theme preference in your browser's local storage (localStorage); it is never sent to any server and you can clear it at any time from your browser settings. The content of your scans is not stored anywhere: it is gone when you close or reload the page.
Last updated: 25 September 2026. The summary at the top is written in plain language; the formal information above is the reference version.