Privacy Policy

1. Who we are

Art Sorter is provided by OriLabs Studio (legal name: 오리랩스 / orilabs), a sole proprietorship registered in the Republic of Korea (Business Reg. No. 548-36-01572; representative Seho Park; 63 Mansu-ro, 802-B35, Namdong-gu, Incheon 21524). Contact: contact@orilabs.studio.

2. What stays on your computer

Your images, file names, folder names, the names you give to characters or series, and your sort history are stored only on your computer. Recognition (tagging, character and scene analysis) runs on your PC. We never receive your images.

2-1. Sorting service

To finish a sort, the app connects to our sorting service (judge.orilabs.studio, hosted on Cloudflare) and sends data that describes your images, not the images themselves: numeric fingerprints (feature vectors), tag words with probabilities that describe each image, a perceptual hash of each image, image dimensions, file sizes and timestamps, whether a file carries camera metadata (not the camera make or model, and never location data), a masked form of each file name (letters are replaced by placeholder letters; digits, punctuation and the extension are kept as they are), a keyed one-way hash of the folder each file came from and, for files of identical size, a keyed hash of the file contents (for duplicate detection; the key is random for each request). When you sort by tags you typed yourself, those tag names are included so the sort can use them. Image files themselves are never uploaded, and readable file names or folder names are not sent; records you made about other collections are not included. The service computes the sorting plan in memory and returns it; it does not store the request. Cloudflare may log technical information such as your IP address and request time for security and operation. A short-lived signed permit (anonymous PC code and expiry) from our license server accompanies each request.

3. Optional improvement data

If "Share anonymous usage statistics" is turned on (an optional, unchecked box on the installer license screen, or the Help window in the app), the app periodically sends anonymous data used to improve sorting accuracy:

• numerical similarity scores between pairs of images and the decisions you made (for example "same series" or "different"),
• a random device identifier generated by the app, the app version and the sorting-model version,
• rough collection size ranges.

This data contains no images, file or folder names, names you entered, or file paths. It is stored on Google Firebase (Google Cloud) and kept for up to 3 years. You can turn this off at any time at the bottom of the Help window in the app; data already sent cannot be linked back to you.

4. Update checks

The app contacts orilabs.studio (hosted by Vercel) and Cloudflare (R2 file storage) to check for and download updates. Like any website request, these providers may log technical information such as your IP address and request time for security and operation.

Website statistics: we count visits and Download clicks in aggregate only (date, country, the site you came from, page language), using cookie-free analytics. Opening the download page on a phone or tablet is counted separately and does not start a download. To limit abuse, we keep a daily counter under a salted one-way hash of the IP address; the address itself is not stored, and we do not build a profile of you.

Email link from a phone: if you enter an email address on our site on a phone, we send one email with a link to open on your PC. The address is used only to send that email and is not stored. To limit abuse we keep a daily counter under a salted one-way hash of the address and of the IP address, and we count only how many such emails were sent each day. Emails are sent through Resend.

4-1. Free trial and license checks

To run the free trial and the license, the app sends: an anonymous PC code (a one-way hash of the Windows machine ID, never the ID itself), the number of images and videos added during the trial, how far the trial has progressed (for example models ready, sorting started, sorting finished), your answer if you choose to tell us why you are not buying (optional, one of a few fixed choices), and your license key when you activate it and when the app confirms it (about once a day). Once a day the app also records that it was opened, sending only that same PC code, the app version and the time, so we can see how many installed copies are actually used. The first time, it also sends how the app was installed: Microsoft Store or our installer, and for our installer the site names (domains only, never full addresses or file paths) it was downloaded through, read from the download note Windows keeps on the installer file. If you buy from inside the app, the PC code is attached to the order so that the purchase can activate that PC automatically; this links the PC code to your purchase record, including your email address. If you connect the phone app for notifications, your PC sends the phone's push token with the result of the sort (image count and minutes only) to our server, which relays the notification through Firebase Cloud Messaging and does not store the token. To limit abuse, these requests are counted per day under a salted one-way hash of the IP address; the address itself is not stored. We use this only to stop the trial from being reset, to enforce the one-PC limit and refunds, and to count usage in aggregate. Trial and open records are kept for up to 3 years; activation records are kept while the license exists and as part of purchase records.

5. Purchases

Payments are processed by our payment provider acting as merchant of record. They collect the payment information needed to complete your order under their own privacy policy. We receive your name, email address, country and license details to deliver and support your license, and keep them as required by Korean tax and e-commerce law (generally 5 years). The email that delivers your license key is sent through Resend, an email delivery provider that processes your email address for that purpose.

5-1. Advertising measurement (X pixel)

To measure whether our ads on X (formerly Twitter) lead to visits and purchases, our website loads the X advertising pixel (static.ads-twitter.com, operated by X Corp.). The pixel receives your browser's identifiers and cookies, the page you viewed, your IP address and device/browser information, and, on the purchase confirmation page, an order event (order number and amount; no name or email). It is not used inside the Art Sorter app, and it never receives your images or file names. If you are in the European Economic Area, the United Kingdom or Switzerland, the pixel loads only after you press "Allow" on the cookie notice; elsewhere it loads automatically. To refuse or withdraw: press "Decline" on the notice, clear this site's data in your browser, use your browser's tracking protection, or opt out in X's settings. Details: X privacy policy.

For the same purpose we also load the Google Ads tag (googletagmanager.com, operated by Google LLC) under the same rule: in the European Economic Area, the United Kingdom and Switzerland only after you press "Allow", elsewhere automatically. It records whether a visit came from a Google ad and, on the purchase confirmation page, that a purchase happened. Ad personalization (remarketing) is turned off, and it never receives your images or file names. To refuse: press "Decline" on the notice, clear this site's data in your browser, or use Google Ad Settings. Details: Google privacy policy.

6. Support emails

If you email us, we use your email address and message only to reply, and delete them when no longer needed.

7. Sharing

We do not sell personal information. We share it only with the service providers above (Google, Vercel, Cloudflare, Resend, our payment provider) or when required by law.

8. Your rights

You may request access to, correction of, or deletion of personal information we hold about you by emailing contact@orilabs.studio. Art Sorter is not directed at children under 14.

9. Changes

We will post changes on this page and update the effective date.