Is message content uploaded?

No. Messages are read and exported in your own browser and never leave your device.

What do you receive from the payment provider?

Anonymized purchase status and a reference — no card numbers, no message content.

Do you use advertising or analytics cookies?

We use Google Ads (gtag.js) to measure advertising conversions. Advertising and analytics storage default to denied until you accept via the cookie banner.

How do I delete my account?

Accounts are optional. If you have one, request deletion via the account page or email.

← Back

Privacy Policy

Last updated: 17 July 2026

This page is maintained by the operator of iExport to explain how the service handles your data. It is not an independent certification.

1. Your chat.db file

The iMessage database file you open in this app is read and parsed entirely inside your web browser using WebAssembly (sql.js). The file is never uploaded to our servers. No message content, contact identifiers, phone numbers, attachments or metadata leave your device. Closing the browser tab discards the loaded database from memory.

2. Exports (HTML / PDF)

The exported HTML and PDF files are generated locally in your browser and saved to your own device. We do not receive a copy.

3. Payment data

Payments are processed by Stripe, Inc., acting as our payment processor. When you check out, Stripe collects the payment information required to complete the transaction (card details, billing email, country and IP address). We never see or store your card details. See Stripe's privacy policy.

4. What we store

After a successful payment we store, in your browser's sessionStorage, the Stripe checkout session ID that unlocks the export button. This identifier is cleared when you close the browser tab. We do not create user accounts and we do not log any information about your conversations.

5. Cookies & analytics

We use Google Ads (gtag.js, conversion ID AW-18329834954) to measure the effectiveness of our advertising. Google Ads may set cookies (including _gcl_*) and process device and usage data to attribute conversions and, where you consent, to build audiences for remarketing. Google acts as an independent controller for this processing — see Google's privacy policy and Google Ads Controller Terms.

For visitors in the EEA, UK and Switzerland we use Google Consent Mode v2. Advertising and analytics storage default to denied until you accept via the cookie banner. If you choose "Only necessary", Google receives only cookieless pings used for aggregated, modelled measurement. We also enable ads_data_redaction and URL passthrough so ad-click identifiers are not stored without consent. You can change your choice at any time by clearing site data for this domain. Stripe may additionally set strictly necessary cookies inside the checkout component for fraud prevention.

6. Your rights (GDPR)

Because we do not store your conversation data, there is generally no message content to access, correct or delete on our side. For payment records, Stripe is the controller. For advertising measurement and remarketing signals, Google is an independent controller. You can exercise your rights (access, rectification, erasure, objection, portability) directly with those providers, or contact us via the contact page and we will forward your request.

7. Contact

Questions about this policy? Contact us.