Privacy Policy

Scope

This policy applies to the Sorted website, dashboard, Android app, browser extension, early-access waitlist, and website feedback form. Sorted's purpose is to let you select, organize, synchronize, share, and reopen browser tabs as workspaces, and to provide updates to people who request early access.

Information Sorted collects

• Personally identifiable information: your account identifier, name, email address, profile image, sharing username, preferences, and subscription status supplied by you or your sign-in provider. If you join the early-access waitlist, Sorted also stores the email address you submit, your email-confirmation status, and the time and wording version of your consent.
• Authentication information: Firebase authentication tokens, refresh credentials, and Sorted sign-in cookies used to keep the website and extension signed in to the same account. Sorted does not receive your Google password.
• Web history and website content: the URLs, page titles, favicons, order, and workspace association of tabs you explicitly select or tabs inside a workspace window opened through Sorted. The extension does not read the body text, forms, passwords, images, audio, or video from those pages.
• User activity: creation, closing, movement, and URL changes of tabs in a browser window linked to a workspace, only as needed to compare those tabs with the saved workspace. Separate from that extension activity, website analytics records only the limited page views and named actions described below; it does not record mouse movement, keystrokes, general page clicks, scrolling, or page contents.
• Network and diagnostic information: IP address and basic request information may be processed by Sorted and its hosting providers for secure delivery, rate limiting, abuse prevention, and operational troubleshooting. PostHog also processes the source IP address and user agent of website analytics requests to create a daily rotating, cookieless visitor count, as described below. This mode does not add approximate region data.
• User-provided workspace information: workspace names, colors, icons, saved tab collections, ordering, sharing usernames, and optional sharing notes.
• Feedback: when you use the website feedback form, Sorted stores your rating and message, the optional name and email address you provide, whether you gave permission for possible public display, and the review status and submission time. Request network information is also processed for rate limiting and abuse prevention. Email is optional and is used only to respond to your feedback.
• Public store reviews: the Sorted website may show short excerpts from public reviews of Sorted on app or extension stores, with the public display name, rating, date, and store attribution. These are selected manually and labeled with their source.
• Planned tasks and reminders: the names, times, notes, and link or app destinations of tasks you create, and the workspaces and times you set reminders for, synchronized across your devices. A planned session also stores the device's configured time-zone identifier (for example, “Asia/Kolkata”) so its time can be displayed and scheduled consistently across devices. A time-zone identifier may indicate a broad region, but it is not precise location data.

Website analytics

The website uses PostHog's cookieless server-hash mode by default for limited audience measurement, without a banner or prompt. PostHog does not store an analytics cookie or persistent visitor ID in your browser. To count approximate unique visitors per day, PostHog derives a daily rotating pseudonymous identifier from the project, a daily salt, the request IP address, user agent, and website hostname. The raw IP address is stripped before later transformations run. Because the identifier changes daily and is not stored in your browser, this mode cannot connect visits across days or devices and may overcount visitors across longer date ranges. IP-based GeoIP enrichment is not run, so PostHog does not add region information in this mode. PostHog also honors browser-level Do Not Track and Global Privacy Control signals; analytics is not sent while either signal is active.

Sorted records page views on selected public website routes, a sanitized referrer domain, validated UTM campaign labels, broad browser, operating system and device categories, and a small set of named actions such as starting a demo video, opening the Play Store listing, or creating a workspace. Page paths are limited to known routes, query strings are removed, and only validated UTM labels are retained. Exact browser versions and screen dimensions are not recorded as event properties. Account IDs, names, emails, workspace content, saved tab titles and URLs, task details, and page text are not sent to PostHog. Person profiles, autocapture, session replay, surveys, and advertising are disabled; Sorted does not sell analytics data. Analytics is sent to Sorted's PostHog project in the United States, where PostHog processes it on Sorted's behalf under its applicable terms and retention controls.

You can turn aggregate website analytics off at any time using the control above or the Analytics settings link in the website footer. When you turn it off, this browser stores that preference so tracking stays off on later visits. Clearing this site's browser data clears the preference and returns analytics to its default setting, unless Do Not Track or Global Privacy Control is active in your browser. This tracking is for aggregate website improvement; rules can vary by location, so visitors can object using the control provided. The Android app does not currently include the PostHog SDK or send these website analytics events.

Information Sorted does not collect

Sorted does not request precise device location, access GPS, or collect latitude and longitude coordinates. Sorted also does not collect health information, your address book, personal inbox contents, text messages, chat conversations, or the contents of forms. Payment-card numbers and other full payment credentials are collected and processed by Dodo Payments through its checkout; Sorted receives transaction identifiers, customer identifiers, subscription state, plan information, and other records needed to provide paid access and meet accounting, fraud-prevention, and legal obligations. Sorted does not track which applications you open on your phone or read your device's usage statistics. It does not keep a separate record of whether you opened or dismissed a notification; choosing Done or Roll over updates the task you created. Website analytics does not ask for your age or gender and does not attempt to infer them.

How Sorted uses information

Sorted uses information only to authenticate your account, display and manage tabs you ask it to handle, save and synchronize workspaces, recover interrupted synchronization, provide sharing, schedule and deliver the reminders and task notifications you explicitly set, operate paid plans, send the waitlist confirmation and early-access updates you request, receive and respond to feedback, review feedback for possible public display when you explicitly opt in, secure the service, prevent abuse, respond to support requests, and maintain reliability. Sorted does not sell user data or use it for personalized advertising, creditworthiness, or unrelated purposes. Human access is limited to feedback you submit, support you request, testimonials you explicitly allow us to publish, security or legal needs, and aggregated and anonymized internal operations.

Feedback is private by default. Checking the optional publication consent box allows Sorted to consider the message and the display name you provide for a public testimonial. Sorted reviews each entry before publishing it; submitting feedback does not publish it automatically. You can ask Sorted to remove a published testimonial or delete your feedback by contacting us.

Sorted uses the limited cookieless website analytics described above to understand daily website traffic, campaign performance, and selected website actions. It does not provide a persistent visitor identity or measure long-term return visits in this mode.

Extension permissions and local processing

The extension uses the tabs permission to show tabs for your explicit selection, open saved tabs, and track windows associated with a workspace. It uses storage for preferences, account-scoped caches, workspace tracking state, and pending synchronization operations. It uses cookies only on Sorted's own domains to connect the extension to your authenticated Sorted account, and alarms to retry pending synchronization after temporary interruptions. Host access is limited to Sorted's application domains. The extension does not execute remotely hosted code.

Mobile app

The Sorted mobile app uses the same account as the website and extension. It receives your account identifier, email address, name, and profile image from your sign-in provider, along with the workspaces, reminders, and planned tasks you create. Links you share into the app from other apps are processed only when you explicitly share them.

Reminders and task notifications are scheduled locally on your device. The app reads the device's configured time zone to schedule them, but does not request device-location permission or use GPS. Sorted does not track which apps you open, access your usage statistics, contacts, or messages, and never sees the content of your notifications. This is intentional: Sorted plans your attention; it does not surveil it.

Data is encrypted in transit. You can delete your account and synchronized data at any time from Settings on the website.

The website PostHog analytics described above are not currently integrated into the Android app.

Workspace synchronization

When you select tabs or save a workspace, the relevant tab titles and URLs are transmitted to Sorted and stored in your account. When you open a saved workspace through Sorted, the extension maintains an account-scoped local snapshot of that workspace window. In manual-sync mode, changes are uploaded only after you choose Sync. In automatic mode, additions and closures in that tracked workspace window are queued locally and synchronized to your account automatically. You can change this preference in Settings.

Sharing and public links

A workspace share link can be opened by anyone who possesses its hard-to-guess URL until the owner revokes it. It may contain the workspace name, tab titles, URLs, and the owner's chosen sharing username. It does not publish the owner's email address. Do not share workspaces containing secrets or sensitive URLs. Saving a link to “Shared with me” creates a private reference in the recipient's account.

Service providers

Sorted uses Google Firebase for authentication and database services, Vercel for application hosting and delivery, Dodo Payments for checkout and subscriptions, Resend for feedback notifications and waitlist email delivery, PostHog for cookieless website analytics, Supabase for Sorted Scan encrypted file storage in Mumbai, India, and browser extension stores for distribution. These providers process information on Sorted's behalf or directly from you under their applicable terms and privacy commitments. Sorted does not authorize these providers to use saved browsing data for personalized advertising.

Sorted Scan documents and encryption

When you choose Save to Sorted, Sorted Scan encrypts the PDF contents on your device before upload. Sorted, Firebase, Supabase, and any optional backup replica receive encrypted file contents and cannot open them. Sorted still processes document titles, categories, file sizes, account identifiers, workspace placement, and sharing activity to provide the feature. A share link contains the information needed to decrypt its file after the link's # character. The part after # is not sent in the HTTP request, but anyone who receives the complete link can view the document. Revoking a link stops later access; it cannot erase a copy someone already opened or saved.

The first time you save a document, Sorted Scan offers a recovery key. Keep it somewhere safe. Sorted stores only a copy of the account key encrypted with a key derived from your recovery key. If you lose the recovery key and every device that already has your encryption key, Sorted cannot restore access to your cloud copies. Your local scans remain on the device unless you delete them.

The optional extra backup copy is off by default and is available only to eligible paid accounts. If enabled, it stores encrypted file contents on Sorted's backup server. Deletions are normally copied within seven days; if that server is offline, deletion is applied when it reconnects. Trial files are removed from cloud storage after seven days. You can turn off the extra copy in Sorted Scan Settings.

Retention and security

Active account and workspace data is retained while your account is open or as needed to provide the service. Trashed workspaces are scheduled for deletion after five days on Free plans and 30 days on paid plans. Local extension workspace data is cleared when it is no longer needed, when you sign out where applicable, or when you remove the extension; uninstalling is controlled by the browser. Public share data remains available until it expires under the applicable plan, is revoked, or the related account is deleted. Security, backup, billing, fraud-prevention, and legal records may remain for a limited period as required for those purposes. Sorted uses encrypted HTTPS connections and access controls, but no online service can guarantee absolute security. Waitlist email addresses are kept while you remain on the list; contact Sorted to withdraw consent and request their removal. Feedback is retained while it is useful for responding to you and improving Sorted. If you ask us to remove a published testimonial, Sorted will take it off the website and delete the associated feedback record unless a limited copy must be kept for security or legal reasons.

Your controls and deletion choices

You may turn aggregate website analytics off or back on at any time using the controls on this page. You may export your account data or request account deletion from Settings, delete or restore workspaces, disable automatic tab sync, revoke public links, remove received shares, sign out, or uninstall the extension. Account deletion removes active application data subject to limited backup, security, billing, fraud-prevention, and legal retention. Removing a reminder or task removes it across your devices, and deleting your account removes all reminders and tasks with it. You may also contact Sorted to request access, correction, or deletion assistance, or withdraw permission to display a testimonial.

Contact and changes

Questions can be sent to sorted.tabs@gmail.com. Material changes will be reflected by updating this page and, where appropriate, providing an in-product notice.