Privacy

Fairly Sorted is an independent service created and operated by Ed Dowding during the founding phase. Privacy, correction, access and safety requests can be submitted through the Contact page.

A verified legal entity name, postal address and any required data-protection representative details will be added before paid public launch.

We collect information you provide, information created as you use the service, and limited technical information needed to operate and protect it.

• Account email, display name and authentication records
• Shared-list titles, descriptions, participant memberships, cards, choices and agreed plans
• Uploaded photos or walkthrough video, generated frames and detections, plus file and processing metadata
• Support messages and an optional reply email
• Entitlements, allowances, pilot applications and content-free usage or cost records
• Security, audit and error information needed to investigate abuse and reliability problems

Account and shared-list information is used to provide the service requested by participants. Media is processed to suggest inventory cards for organiser review. Operational data is used to secure, troubleshoot and improve the product.

Optional analytics is used only after consent to understand whether allowlisted product steps succeed or fail. It is not used for advertising or to evaluate the contents of a particular list.

Where UK or EU-style data-protection law applies, intended legal bases are performance of the service agreement, legitimate interests in securing and operating the service, consent for optional analytics, and compliance with legal obligations where required.

The correct basis for shared information about another person, special-category data, children’s data and each launch jurisdiction requires legal review. Users must have an appropriate reason and authority before adding information about someone else.

Members of the same list can see its cards and the resulting reviewed split. Individual choices are collected separately while people decide, but the service is not a promise of legal confidentiality.

Organisers control invitations and should invite only the people who genuinely need access.

Data may be processed by infrastructure and service providers that support hosting, private object storage, email delivery, AI media analysis, opt-in analytics and support-ticket storage. These providers act only for the relevant service function.

Information may also be disclosed where required by law, to protect people or the service, or as part of a properly governed business transfer. Fairly Sorted does not sell shared-list contents or personal data. A named processor list and contract review are required before commercial launch.

The product is designed around EU-hosted analytics and private service boundaries, but individual infrastructure or AI providers may process data in other countries. Applicable safeguards, locations and transfer mechanisms require a documented processor review before commercial launch.

Raw or quarantine images are deleted after sanitation and within 24 hours after a failed attempt. Unconfirmed detections and unselected frames expire after seven days.

Walkthrough source video is deleted after reviewed inventory confirmation and no later than seven days after processing. Sanitised card images remain until the shared list is deleted. Generated suggestions must be reviewed and may be inaccurate.

Deleting a shared list queues known media objects for removal immediately. Object deletion and backup expiry are intended to complete within 30 days. Content-free usage, cost and audit metadata is retained for up to 12 months where needed for security, accounting and reliability.

Account deletion removes organiser-owned lists and media. In lists organised by someone else, the deleted person’s profile is pseudonymised as “Deleted participant” where needed to preserve the other participants’ understandable record. Support messages are retained only while needed to respond and manage the reported issue; a final support-retention schedule requires review.

Production analytics is intended to be opt-in, EU-hosted and retained for no more than 90 days. Autocapture, session replay, advertising tracking, surveys and performance capture are disabled.

• Analytics uses an opaque internal user ID after sign-in, not an email or name
• Media, list titles, item text, invite codes, payment data, secrets and full URLs are rejected at the analytics boundary
• Signing out resets the analytics identity; account deletion queues deletion of the associated analytics person
• The choice can be changed at any time on the Cookies page or in Settings

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, receive portable data and complain to a data-protection authority. Rights can have legal exceptions and require identity verification.

Signed-in users can correct their display name, download a JSON copy, delete organiser-owned lists and delete their account in Settings. Use the Contact page for another format, a correction not available in-product, or any other privacy request.

Fairly Sorted uses access controls, private media storage, time-limited signed operations, sanitisation, same-origin checks and data-minimising analytics boundaries. No system can guarantee complete security. Report suspected security issues through Contact without including exploit details or another person’s data.

Fairly Sorted is not designed as a service for children to operate independently. Adults must not add unnecessary information about children. Age requirements, parental authority and any UK Children’s Code or equivalent obligations require legal review before broader launch.

Material changes will be dated on this page and, where appropriate, communicated in-product or by email. Submit privacy questions and rights requests through the Contact page and include a reply address.