Non-destructive filtering
Creates a configurable server folder named Suspected Spam by default. JunkQuell never sends IMAP delete or expunge commands.
Local-first email defense for Windows
Quiet the inbox.
Keep control.
JunkQuell scans IMAP inboxes, explains why a message looks suspicious, and safely moves flagged mail into Suspected Spam—without ever permanently deleting email.
Still in development
Local-first
No permanent deletion
IMAPSCertificate verified
Local analysisExplainable decisions
01
Your inbox stays yoursRaw mail is not stored in the learning database.
02
Decisions stay visibleEvery result includes its score and reasons.
03
Flagged does not mean deletedMail is moved or safely copied to a server folder.
Available in the current prototype
Practical protection, built around safe behavior.
JunkQuell combines transparent heuristics with feedback-driven learning. It starts cautiously in audit-only mode so you can review behavior before enabling server-side transfers.
Explainable heuristics
Scores message and authentication signals, then shows the reasons behind each result instead of returning a silent black-box verdict.
Learning from feedback
Spam and Safe feedback compounds into a local adaptive token score, helping the filter respond to patterns that were never part of its original rules.
Flexible account setup
Supports multiple IMAPS profiles, built-in provider settings, DNS and HTTPS autodiscovery, and a manual path for other providers.
OAuth and provider 2FA
Google and Microsoft sign-in opens in the system browser. The provider handles passwords, passkeys, MFA, and Conditional Access.
Windows-native experience
A native C++ interface follows Windows light, dark, High Contrast, accent-color, and system-font personalization settings as they change.
Account connectivity
Common providers, one setup surface.
Choose a known provider or let JunkQuell discover secure IMAP settings from the email address.
GmailOutlook.comMicrosoft 365Yahoo MailAOL MailiCloud MailFastmailZohoGMXXfinityAT&TOther IMAP
Authentication method varies by provider. OAuth is currently implemented for Google and Microsoft; some other providers require an app password until their OAuth integration is completed.
How it works
A measured path from connection to action.
Connect
Select a provider or securely discover IMAP settings.
Scan
Read messages with BODY.PEEK so scanning does not intentionally mark them read.
Review
Inspect the score and reasons, then mark results Spam or Safe to improve local analysis.
Quell
When enabled, move flagged mail to Suspected Spam; retain the Inbox original when MOVE is unavailable.
Privacy architecture
Useful learning without building a copy of your mailbox.
The local SQLite database stores keyed HMAC hashes and aggregate features—not raw message bodies, subjects, sender addresses, passwords, or OAuth tokens. Passwords and refresh tokens are held in Windows Credential Manager, while short-lived access tokens remain in memory.
Certificate-verified IMAPSEncrypted account connections only.
Aggregate-only sync designNo raw mail, addresses, URLs, or message IDs.
Planned development
The road ahead.
These capabilities are planned and are not presented as part of the current prototype. Priorities may change as live mailbox validation continues.
One-click provider sign-in
Ship registered Google and Microsoft application identities and pursue Yahoo/AOL mail-scope approval so most users can authorize in the browser without entering a client ID or app password.
Local semantic classification
Add a compact BGE/ONNX-based model alongside the heuristic engine to recognize new wording and unseen spam campaigns without sending message content to a cloud model.
Richer message analysis
Decode MIME encoded headers and add attachment-aware signals while keeping analysis on the Windows device.
Production community intelligence
Deploy the anonymous aggregate service on Max Power IT infrastructure with signed rule updates, consent controls, validation, rate limits, retention, and rollback.
Provider and mailbox validation
Complete controlled live testing across supported providers before enabling automatic transfer workflows for production mailboxes.
Active prototype
Safer inbox automation starts with restraint.
JunkQuell is currently in development and is not yet offered as a general-release download. Contact Max Power IT to discuss the project or testing.