EVTX parser is operated by Cyber Experts (github.com/Cyber-Experts). This policy explains what data is processed when you use the site, and what is not.
Your event log files never leave your device
The .evtx files you open are parsed inside your browser by a WebAssembly module running in a web worker. Their content, file names and parsed events are never uploaded to us or to anyone else. Searching, filtering, hunts, exports and reports are all computed locally. Once the page has loaded you can disconnect from the network and the viewer keeps working.
Data stored in your browser
- Saved sessions — only if you click Save session: the files and your analysis state (search, filters, bookmarks, notes) are stored in your browser's IndexedDB on this device. They are not synchronised or sent anywhere. Delete them from the start screen or by clearing this site's data in your browser.
- Preferences — theme, UTC/local time display and column layout are kept in
localStorage.
We do not use advertising or tracking cookies.
Analytics
To understand how the site is used, we collect aggregate, cookieless statistics with Vercel Web Analytics, Vercel Speed Insights (performance metrics) and Ahrefs Web Analytics: pages viewed, referrer, country, browser and device type. Two usage events are recorded: that a file was parsed (with a file-size bucket and the number of records) and that an export was made (format and number of rows). These events never include file names or any event content.
Hosting
The site is hosted by Vercel, which processes technical request data (such as IP address and user agent) to deliver the site and protect it against abuse.
Self-hosted instances
The source code is available, so you can run your own instance. Built with NEXT_PUBLIC_OFFLINE=1, it loads no third-party script and sends no analytics at all.
Your rights
Under the GDPR you can request access to, correction or deletion of personal data we hold about you, or object to its processing, by emailing contact@evtxparser.com. Because log files are processed only on your device, we hold no copy of them.