Why Klarinbox does not upload your emails
Klarinbox opens a message, a whole mailbox or an exported WhatsApp chat in your browser, takes out the attachments and makes PDFs that state which file they came from. This page says what it does, and how to check it.
The problem
A mailbox is someone's private life, a firm's confidential matter, an employee's file. To open a .msg without Outlook or turn an email into a PDF, online converters ask you to upload the file; free PST viewers are programs to install, which company computers refuse.
And printing from the mail program loses what matters when an exchange has to go into a case file: the headers, the attachments, the link to the original file.
What we do instead
Everything happens in your browser tab. The file is read from your disk, displayed and laid out in memory, and what you save goes back to your disk. No server receives it: this site is a set of static files, and the page reading your messages is not allowed to open a connection to any other domain.
Your files do not leave
No upload, no account, no remote image loaded: loading them would tell the sender the message was read.
Faithful and traceable
The message is laid out, not rewritten. Each PDF carries a record as an appendix: the source file, its SHA-256 fingerprint, the full headers, the attachments and their fingerprints.
Ready for the case file
Messages sorted by date, numbered, one PDF per exhibit with its number at the top of each page, and the exhibit list in Word and PDF.
All these files become one list of messages
A .msg, an .eml, a PST of several gigabytes, an exported Gmail mailbox or a WhatsApp chat all become the same thing: a list of messages, which you read, search, filter, extract attachments from and produce.
A mailbox is read in chunks, never loaded whole. On a generated 6 GB PST, in Edge: the list appears in 4.3 seconds, search answers in 0.6 seconds while indexing runs, a message opens in 0.1 seconds. Messages marked personal are set aside by default.
What Klarinbox does not say
Klarinbox shows what a file contains and points out what looks inconsistent, with the possible innocent cause. It never says a message is authentic or fake, and it replaces neither a bailiff's report nor an expert examination. A PDF produced here is a readable, dated document tied to its original; what is made of it does not depend on the tool that laid it out.
Klarinbox, Klarmask and Klarfile
Klarinbox produces the exhibits; Klarmask redacts what must not be shared; Klarfile assembles, numbers or signs the PDFs. On all three sites, your files stay on your device.
How to check it
Open the developer tools
Press F12, Network tab. Drop a message and turn it into a PDF: no request leaves with its content.
Turn off the network
Once the page has loaded, switch to airplane mode and carry on: reading, extraction and PDF all keep working.
Read the security policy
In the page source, the
Content-Security-Policytag carriesconnect-src 'self': the browser refuses any connection to another domain. The details.