Falconshield / Josef Falkensköld, a sole trader registered in Sweden, is the data controller for personal data processed in Sorle.
If you have a question about your data, email us. You will reach the person who wrote this, not a ticket queue.
Nothing that identifies you. Free locations play without a login, and your settings stay in your browser.
Our hosting provider records standard web server logs when files are requested. These include an IP address and a timestamp, and are used to keep the service running and secure.
We never see or store your card details. Payment is handled entirely by Stripe. Your card number does not pass through Sorle.
Scene shortcuts, names, notes and settings you save are stored against your account so they work across your devices. We do not read them except when you ask us to help with a problem.
When you host or join a session, a relay server passes the soundscape's control values between participants — the position of the Activity and Mood axes, which location is playing, and similar state. No audio passes through the relay, and sessions are not recorded.
The relay keeps short-lived operational logs of session activity: when a session opened, how many participants were connected, and when it closed. These do not include participant names. Connection metadata such as an IP address may appear in our hosting platform's own logs for a limited period.
Sorle stores things locally in your browser that never reach us: your sign-in session, your saved scenes, your MIDI mappings, your interface preferences, and a cache of downloaded sound data so it does not have to be fetched again. Clearing your browser storage removes all of it. This local copy is not affected by deleting your account.
Location trailers are hosted on YouTube. Nothing is loaded from YouTube until you choose to play a trailer. When you do, the video is streamed from YouTube's servers, which means Google receives your IP address and may set cookies or collect data under Google's own privacy policy. We do not receive any of that data. If you prefer, simply don't play the trailers — Sorle works the same without them.
| What | Legal basis |
|---|---|
| Running your account and giving you what you bought | Performance of a contract |
| Sign-in codes and purchase confirmations | Performance of a contract |
| Keeping the service secure and working | Legitimate interests |
| Bookkeeping and tax records | Legal obligation |
| Any newsletter or product announcements | Consent, withdrawable at any time |
We use a small number of providers. They act on our instructions and may not use your data for their own purposes.
| Provider | What for | Where |
|---|---|---|
| Supabase | Accounts, entitlements, saved scenes | Ireland |
| Stripe | Payment processing | EU and US |
| Resend | Sign-in codes and transactional email | United States |
| Railway | Multiplayer relay | Netherlands; platform operated from the US |
| Simply.com | Web hosting | Denmark only |
| Discord / Google | Optional sign-in, only if you choose it | United States |
| YouTube (Google) | Trailer playback, only if you press play | United States |
Where a provider processes data outside the EU/EEA, that transfer is covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard.
Under the GDPR you have the right to:
Email info@sorle.se and we will respond within one month, usually much sooner.
Deleting your account. Open the account panel in Sorle and choose "Delete my account". This immediately removes your email address, your sign-in details, your saved scenes and your entitlements from our database. It cannot be undone from within Sorle.
The record of a purchase remains with Stripe, where accounting law requires it. If you delete your account and later return, contact us and we can restore access to what you bought.
If you are unhappy with how we handle your data, you may complain to the Swedish Authority for Privacy Protection (IMY, imy.se), or to the supervisory authority in your own country.
Sorle is not directed at children under 13, and you must be at least 13 to create an account. If you believe a child under 13 has given us personal data, contact us and we will delete it.
Data is encrypted in transit. Access to the database is restricted by row-level security so that an account can only reach its own records. Payment data never touches our systems.
No service is perfectly secure, but Sorle holds very little that would be worth taking: an email address and a list of sound files you are allowed to play.
We may update this policy. If a change materially affects how we handle your data, we will notify account holders by email. The current version and its date are always shown at the top of this page.
Falconshield / Josef Falkensköld
Stjärngatan 35, 911 30 Vännäs, Sweden