Security
Your photos stay yours.
Updated November 13, 2026
Processed locally
Reading metadata, building folders and finding duplicates all happen on your computer. No photo, thumbnail or file name is uploaded.
Verified downloads
The installers and every update are checked against a SHA-256 fingerprint published on the site before anything is installed.
Payments by Stripe
Card details go straight to Stripe. SORT never sees or stores your card number.
Your account
Sign-in is handled by Google Firebase Authentication, with Google or a one-time email link. We store your email, how you signed in, your trial dates and your plan. Passwords are never stored by SORT.
Code signing
SORT is not yet signed with paid Apple and Windows certificates, which is why macOS and Windows show a warning for files downloaded from a browser. The one-line installers avoid that warning and still verify each file's fingerprint. Signed builds are planned.
What SORT can access
Only the folders you choose. In the browser, your browser asks you to allow each folder. The desktop app reads and writes only where you point it.
Reporting a vulnerability
Found a security problem? Tell us through the report form with the word Security in the message. We confirm within two working days and credit you once it is fixed, if you wish. Please give us reasonable time to fix it before sharing details publicly.