Privacy Policy

Who we are

SORT is made by CDAV.IO, the controller of the data described here. This policy covers the website at sort.cdav.io and the SORT apps for macOS and Windows.

Your photos stay on your device

SORT reads each file's metadata (camera model, time, GPS position when present) and makes small previews, all on your own computer.

• No photo, video, thumbnail, file name or metadata is uploaded or shared.
• GPS positions become city names with a list built into SORT; no location lookup leaves your machine.
• Find duplicates makes a small fingerprint of each picture on your computer. It is not uploaded and is forgotten when SORT closes.

Your account

To use SORT you sign in with Google or your email. We store: your email address, the sign-in method, when you created the account, your trial end date, your plan and its end date, the offer timers shown to you, your answer to the short “why not now?” question if you give one, your invoices, and any refund request. We use this to give you access, run the trial and offers, and support you. Legal basis: providing the service you asked for (contract) and keeping invoices (legal obligation).

Affiliate Program

If you join, we store your link code, where you said you will share SORT and the link you gave (if any), your level, how many times your link was opened (only a number), the people who signed up through it, your commissions, your payout details (country, and either the account holder name and IBAN, or the USDT network and wallet address), and your withdrawals with their transfer references. We use this to run the program and pay you. Legal basis: the program agreement (contract), and keeping payment records (legal obligation).

What an affiliate sees about you if you signed up through their link: your email with most of it hidden (for example a•••@example.com), the day you signed up, and whether you bought a year. Never your name, full email or payment details.

The referral code in your browser. If you open a SORT link with ?ref=, your browser keeps that code for 30 days, so the person who shared it is credited if you create an account. It holds nothing about you and is used for nothing else.

Invitations. If SORT invites you to the program, we store your email and the level offered, and send you one invitation email.

Payouts. To send a withdrawal we give your payout details to our bank (SEPA) or use them in our crypto wallet (USDT). A USDT transfer is recorded on a public blockchain, where the receiving wallet address and the amount can be seen by anyone.

Gifts

If SORT gives you free access, we store your email address, the date the gift was given and when it ends, and send you one email about it. The gift stays linked to your email until it ends or is removed. Legal basis: giving you the access you were offered (our legitimate interest, and the service once you use it).

Payments

Payments are processed by Stripe. Stripe receives your payment details; we receive your name, country, VAT number if you give one, the amount and the payment status, to issue invoices and unlock your plan. We keep invoices as long as tax law requires.

Services we use

• Google Firebase (sign-in and account records). Firebase privacy
• Stripe (payments, VAT). Stripe privacy
• Resend (emails we send: the 6-digit sign-in code, the password reset code, receipts with your invoice, gift emails, affiliate emails, and your bug reports and messages to us). Resend privacy
• Cloudflare (the website pages and their secure connection; like any web host it briefly processes your IP address to deliver the pages and stop attacks). Cloudflare privacy
• Netlify (the server that runs accounts and payments, the downloads and the update file). Netlify privacy

Some of these providers process data outside the EU under the European Commission's standard contractual clauses.

Cookies and local storage

SORT stores a small amount of information in your browser or app. We ask for your consent before using anything that is not essential.

• Essential, always on: your signed-in session, your language and theme, update settings, your answer to the cookie notice, and the referral code of a link you opened (for 30 days, see Affiliate Program above). The website also keeps a copy of itself so it opens offline. SORT does not work properly without these.
• Statistics, only if you choose Accept all: an anonymous count of visits, the country worked out from your device's time zone (never your city or IP address), which offers were shown and whether the app was downloaded. We use this only to improve SORT.

SORT uses no advertising or third-party tracking cookies, and we never sell your data. You can change your choice at any time with Cookies at the bottom of every page.

Bug reports and contact

The report form sends your email, your message, a screenshot if you add one, and the SORT version or the page you were on. The contact form sends your name, email, phone if you add one, and your message. Both are emailed to us through Resend, from our server on Netlify. We use them only to answer you, and delete them when the matter is closed.

Refund notices

When you ask for a refund, the site sends us your email, the order number and the amounts, so we can process it. You do not type anything.

How long we keep data

Account data stays while your account exists. When you delete your account we remove it within 30 days, except invoices and affiliate payout records we must keep by law.

One thing we keep after deletion: a one-way fingerprint (a hash) of your email address and whether you already had a refund. It cannot be turned back into your email. It only lets us recognise the same address if it signs up again, so the free week, the sign-up offer and the refund are not given twice. Legal basis: our legitimate interest in preventing misuse of the free trial and refunds.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it, through the report form. We answer within 30 days. In the EU and UK you can also complain to your data protection authority.

Children

SORT accounts are for people aged 18 or older. We do not knowingly create accounts for anyone younger, and we delete them if we learn of one.

Changes

Updates appear on this page with a new date.