Privacy Policy

Shiryoku, LLC runs sortui.dev and sells SortUI. We are responsible for the personal data described here. We collect as little as we can, we do not sell it, and we do not use it for advertising.

• Purchase details. When you buy, Polar collects your name, email, billing country and payment details. We receive your name, email, what you bought and your license key. We never see your full card details.
• Account details. When you sign in, we keep a one-time sign-in code for 10 minutes. On a Team plan we keep the emails of the people you invite and their license keys. Your purchases, license key and downloads stay with Polar, and we read them when you open your account.
• Messages. When you write to us, we keep the email and what you send so we can answer.
• Technical data. Like every website, our servers log requests: IP address, browser, pages and registry items requested, and the time. This includes requests the shadcn CLI or an AI coding agent makes to our registry on your behalf. We never receive the code of your project.
• Usage statistics. Vercel Web Analytics counts visits without cookies: the page, the referring site, the country, the browser and the device type. A visitor is told apart only by a hash that resets every day, so it cannot follow you across days or sites, and we never see who you are.

• to deliver what you bought and check license keys;
• to run your account and answer your questions;
• to send emails about your purchase, updates and important changes;
• to send product news, only if you agree, with a way to unsubscribe in every email;
• to keep the service secure and prevent fraud and abuse;
• to meet our legal and tax obligations.

If you are in the European Economic Area or the United Kingdom, we process your data to perform our contract with you (purchases, accounts, support), for our legitimate interests (security, fraud prevention, improving the service), with your consent (product news) and to comply with the law (tax and accounting).

We share data only with the services that help us run SortUI, and only what they need:

• Polar, our merchant of record, for payments, taxes, invoices and license keys;
• Vercel, which hosts the website and the registry and counts visits;
• our email provider, to send sign-in codes, team invitations and other email, and to receive yours;
• our database provider, which stores sign-in codes and the seats of Team plans.

We may also disclose data when the law requires it, or to a buyer if Shiryoku, LLC is sold or merged, under the same protections. Some of these services are in the United States; where data leaves your country, we rely on the safeguards the law provides, such as standard contractual clauses.

We do not use advertising or cross-site tracking cookies. The site uses only what it needs to work: a cookie that keeps you signed in, one that remembers your plan so the site does not offer you what you already own, and browser storage that remembers interface choices such as your package manager or an open tab. Polar’s checkout sets its own cookies to process your payment safely. Visit statistics use no cookies.

We keep account and purchase data while your account is active and for as long as tax and accounting law requires after that. Server logs are deleted within 30 days. Messages are kept as long as we need them to help you. When you delete your account, we remove your data within 30 days, except what we must keep by law.

Depending on where you live, you can ask us to show you the data we hold about you, correct it, delete it, send it to you in a portable format, or stop using it for certain purposes. You can withdraw your consent to product news at any time. If you are in the EEA or the UK, you can also complain to your data protection authority.

California residents have the right to know what we collect, to ask for deletion and not to be treated differently for using these rights. We do not sell or share personal information as the CCPA defines it.

Write to contact@sortui.dev from the email you use with us, and we will answer within 30 days.

Data travels over encrypted connections, access to it is limited to the people who need it, and payments are handled entirely by Polar. No system is perfectly secure, so if we ever learn of a breach that affects you, we will tell you.

SortUI is not meant for anyone under 16, and we do not knowingly collect their data. If you think a child has given us data, write to us and we will delete it.

When we change this policy, we post the new version here with a new date. If a change matters for how we use your data, we email you before it takes effect.

Questions and requests about your data go to contact@sortui.dev.