Skip to content
Klarinbox

Emails opened, extracted and turned into exhibits, without leaving the tab

Klarinbox opens a message, a whole mailbox or an exported WhatsApp chat in your browser, takes out the attachments and makes PDFs that state which file they came from. Here is what sets it apart, and how to check it.

The problem

A mailbox is someone's private life, a firm's confidential matter, an employee's file. To open a .msg without Outlook or turn an email into a PDF, online converters ask you to upload the file; free PST viewers are programs to install, which company computers refuse.

And printing from the mail program loses what matters when an exchange has to go into a case file: the headers, the attachments, the link to the original file.

What we do instead

Everything happens in your browser tab. The file is read from your disk, displayed and laid out in memory, and what you save goes back to your disk. No server receives it: this site is a set of static files, and the page reading your messages is not allowed to open a connection to any other domain.

  • Nothing is sent

    No upload, no account, no remote image loaded: loading them would tell the sender the message was read.

  • Faithful and traceable

    The message is laid out, not rewritten. Each PDF carries a record as an appendix: the source file, its SHA-256 fingerprint, the full headers, the attachments and their fingerprints.

  • Ready for the case file

    Messages sorted by date, numbered, one PDF per exhibit with its number at the top of each page, and the exhibit list in Word and PDF.

A mailbox at the centre, tasks around it

A .msg, an .eml, a PST of several gigabytes, an exported Gmail mailbox or a WhatsApp chat all become the same thing: a list of messages, which you read, search, filter, extract attachments from and produce.

A mailbox is read in chunks, never loaded whole. On a generated 6 GB PST, in Edge: the list appears in 4.3 seconds, search answers in 0.6 seconds while indexing runs, a message opens in 0.1 seconds. Messages marked personal are set aside by default.

What Klarinbox does not say

Klarinbox shows what a file contains and points out what looks inconsistent, with the possible innocent cause. It never says a message is authentic or fake, and it replaces neither a bailiff's report nor an expert examination. A PDF produced here is a readable, dated document tied to its original; what is made of it does not depend on the tool that laid it out.

Three sites, one path

Klarinbox produces the exhibits; Klarmask redacts what must not be shared; Klarfile assembles, numbers or signs the PDFs. All three keep the same promise: nothing leaves the tab.

How to check it

  1. Open the developer tools

    Press F12, Network tab. Drop a message and turn it into a PDF: no request leaves with its content.

  2. Turn off the network

    Once the page has loaded, switch to airplane mode and carry on: reading, extraction and PDF all keep working.

  3. Read the security policy

    In the page source, the Content-Security-Policy tag carries connect-src 'self': the browser refuses any connection to another domain. The details.