Privacy Policy

Every task you sort — the note, the category, the urgency, whether it’s done — is written to your browser’s own local database (IndexedDB) and never sent anywhere else. There is no SortEd server-side database, no user table, no backup copy. If SortEd’s servers disappeared tomorrow, nothing you’ve sorted would be lost or exposed, because it was never there in the first place.

This also means SortEd has no cross-device sync: what you sort on one browser, on one device, stays on that browser, on that device. Clearing your browser’s site data for sort-ed.org, or using a private/incognito window that wipes storage on close, clears it too.

Connecting Google or Slack is optional — Quick Capture works fully without either. If you do connect them:

Gmail (read-only). When you open the Messages panel and scan, SortEd asks Gmail for your 15 most recent inbox messages from the last two days — just the sender, subject line, and Gmail’s own short preview snippet, never the full message body. That's read fresh for that one request, used to guess whether a message looks sortable, shown to you in the feed, and then forgotten — nothing is written to a database or a log. SortEd cannot send, delete, or modify anything in your Gmail.

Google Calendar (read-only). Today’s Schedule asks Calendar for events between your browser’s local midnight and the next one, restricted to just the event time and title — no description, no attendee list, no location. SortEd cannot create, edit, or delete calendar events.

Slack (read-only, coming soon). Once available, scanning Slack reads recent history from your own channels and DMs using your own user-level access — the same messages you could already see — never a bot with separate access, and never anything you can’t already read yourself. SortEd cannot post, edit, or delete anything in Slack.

None of this is summarized or processed by an external AI service — the "who / what" line you see in the feed is built with a plain, local keyword heuristic. Your email and Slack content never leaves SortEd’s own one-off request to Google or Slack and back to your browser.

Signing in with Google or Slack uses standard OAuth — SortEd never sees or stores your password. What it receives is a limited-scope access token, which is encrypted and signed into a cookie in your own browser (NextAuth’s JWT session). There is no server-side session store: the token lives only in that cookie, and only your browser holds it.

One consequence worth knowing: signing out of SortEd clears that cookie, but it doesn’t revoke the underlying Google or Slack authorization on its own — Google and Slack keep a separate record that you granted SortEd access, the same as any other app you’ve signed into with your Google account. To fully revoke it, visit myaccount.google.com/permissions and/or your Slack workspace’s "Apps" settings and remove SortEd there.

SortEd is built for teachers, not students — there’s no student-facing sign-in, and SortEd never connects to a student information system or gradebook. If you choose to type a behaviour note, a parent contact summary, or similar into Quick Capture, that text is treated exactly like any other sorted task: it stays in your own browser’s local storage, never sent to a SortEd server.

That said, behaviour and assessment notes are still student records under most schools’ own data policies, regardless of where they’re technically stored. Please follow your school’s guidance on what belongs in a tool like this — initials rather than full names are a sensible default, and this policy isn’t a substitute for your school’s own data-handling rules or a legal opinion on them.

No ads, no ad tracking, no selling or sharing your data with third parties, no third-party analytics watching what you sort, and no write access to your Gmail, Calendar, or Slack — everything above is read-only by design, enforced by the OAuth scopes SortEd requests, not just a promise.

The "Support SortEd on Ko-fi" button is a plain link to Ko-fi’s own donation page. SortEd itself never handles, sees, or stores any payment or card information — Ko-fi does, under its own privacy policy.

If what SortEd accesses or stores changes, this page will be updated and the "Last updated" date above will change with it. Significant changes will also be noted in the app itself.

Questions, concerns, or a request to understand your data (there won’t be much to find, since it’s on your device, not SortEd’s servers) — email sorted.help@proton.me.