Privacy

MXLens has no accounts, no database and no analytics. This page describes what the software does; anyone running their own copy can verify it in the source code.

Emails you analyze

Files you drop on the analyzer are parsed and scored in your browser. The email, its body and its attachments are not uploaded. The most recent result is kept in your browser's session storage so a page refresh does not lose it; closing the tab clears it.

External lookups

External lookups are off by default. If the operator of a server enables them, the server sends indicators extracted from the email (public IP addresses, domains and attachment hashes, never the email itself) to reputation and geolocation services such as VirusTotal, AbuseIPDB, abuse.ch, Google Safe Browsing, PhishTank and ipinfo. The analyzer page says when this is the case.

Server logs

Like any web server, the server hosting this page may keep standard access logs (IP address, time, requested URL). MXLens itself does not log analysis results.