How Sortownia handles your data
Last updated: 18 September 2026 · version 2026-09-v1
This notice covers sortownia.pleso.me only. It supplements Pleso’s general privacy policy, which applies to everything not described here (your rights, complaints, transfers outside the EEA).
Who is responsible
Pleso Therapy sp. z o.o., ul. 12 Lutego 25/7, 82-300 Elbląg, Poland (KRS 0000980227) is the data controller. Data protection officer: iod@pleso.me. General questions: hello@pleso.me.
What we process, why, and for how long
Sortownia has no accounts. You play anonymously; an email is only involved if you save your result or subscribe to Pleso emails.
- Your game
- Which bucket you chose for each card, your result type, your language and the time. Basis: our legitimate interest in running the game and showing real “% of Poland” statistics (art. 6(1)(f) GDPR). Kept 12 months. Aggregated counters are kept without a time limit; they contain no identifiers.
- Analytics (only if you allow it)
- A random id stored in your browser, your play history on this device, the trackable link you came from and campaign (UTM) parameters. Basis: your consent given in the banner (art. 6(1)(a) GDPR; art. 399 of the Polish Electronic Communications Law). Withdraw it under “Cookie settings”: everything stored is deleted immediately. Events are kept 12 months. Without consent we still count visits and plays, but without any identifier.
- Night journal
- Your email and your results, so that you can see your saved nights again in this browser. Basis: providing the journal you asked for (art. 6(1)(b) GDPR). The journal is deleted 30 days after it was created, or at once when you press “Delete my saved journal”. Entering your email does not subscribe you to any emails.
- Pleso emails
- Your email, language, where you subscribed, the trackable link you came from and the exact consent text, version and time. Nothing links this record to your game or to the analytics id. Basis: your consent, given by pressing “Subscribe to Pleso emails” (art. 6(1)(a) GDPR; art. 398 of the Polish Electronic Communications Law). Before the first email you receive a confirmation message; nothing else is sent until you confirm. Unsubscribe with the link in every email or by writing to hello@pleso.me. Kept until you withdraw; the consent record is then marked withdrawn and kept for 5 years as evidence.
- Thoughts dropped in the jar
- The text you type, your language and the time. Nothing links a thought to your game or your browser. Please do not include names or anything that identifies a person. The jar is read only by Pleso’s marketing team, who may reuse approved thoughts anonymously in a future deck. Basis: your consent by pressing “Drop it in the jar”. Rejected thoughts are deleted at once; the others are kept 12 months.
- New-deck notifications
- A push token issued by your browser and your language, only after you turn notifications on. Basis: your consent (browser permission). Turn them off in your browser settings; unused tokens are deleted after 6 months, invalid ones immediately.
- Technical logs
- Our hosting provider records your IP address, browser type and the requested page for security and to keep the site running (art. 6(1)(f) GDPR). Logs are kept up to 30 days. To block abuse of the forms, our server also keeps a counter under a hash of your IP address, deleted within 24 hours. We do not use any of this to profile anyone.
What is stored in your browser
Everything below is first-party. Nothing from advertisers or analytics companies.
| Name | Purpose | Duration | Type |
|---|---|---|---|
sw_consent (cookie) | Remembers your cookie choice | 6 months | Necessary |
sw_night_session (cookie) | Opens your night journal in this browser | 30 days | Necessary |
sortownia:session (session storage) | Keeps an unfinished round while the tab is open | Until you close the tab | Necessary |
sw_push_registered (local storage) | Remembers that notifications are on | Until cleared | Necessary |
sw_link (cookie) | Which trackable link brought you here | 30 days | Analytics (consent) |
sw_uid (local storage) | Random id to count unique browsers | Until withdrawn or cleared | Analytics (consent) |
sw_history (local storage) | Your last 30 results on this device | Until withdrawn or cleared | Analytics (consent) |
sw_utm (session storage) | Campaign parameters carried to Pleso links | Until you close the tab | Analytics (consent) |
You can change or withdraw your choice at any time under “Cookie settings” in the footer.
Who else sees the data
- Google Cloud EMEA Ltd (Ireland) hosts Sortownia and its database (Firebase: Firestore, Cloud Storage, App Hosting) in data centres in the European Union, under a data processing agreement. Push notifications are delivered by Firebase Cloud Messaging, which may involve Google LLC (USA) under the EU-US Data Privacy Framework and standard contractual clauses.
- If you subscribe to Pleso emails, your address and consent record are transferred to Pleso’s email platform (HubSpot, Inc., USA, EU-US Data Privacy Framework and standard contractual clauses) to send those emails.
- Links to Luma (event registration) and pleso.me open other sites with their own privacy policies. We only add campaign parameters to those links; we do not send them personal data.
No third-party trackers
Sortownia loads no Google Analytics, Meta Pixel, Hotjar or any advertising script. Fonts are served from our own servers. Statistics are counted by our own code and shown only to Pleso’s marketing team.
Age
Sortownia is meant for people aged 16 and over. If you are younger, please play without entering an email.
Your rights
You can ask for access, correction, deletion, restriction or a copy of your data, object to processing based on legitimate interest, and withdraw any consent without affecting what happened before.
- Delete your journal yourself under “Your night shift → Delete my saved journal”.
- Withdraw analytics consent under “Cookie settings”; stored identifiers are removed at once.
- Unsubscribe from emails via the link in every email or at hello@pleso.me.
- For anything else, including a copy or deletion of everything held under your email, write to iod@pleso.me. We answer within 30 days.
You can also complain to the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.
Changes
We will update this notice when Sortownia changes what it stores. If the change concerns your browser storage, the banner will ask again.