Privacy Policy

Last updated: 2026-10-22

Who we are

This policy covers swordfishsoft.org and the SwordFishSoft desktop apps. Both are run by Chongqing Swordfish Technology Co., Ltd. ("SwordFishSoft", "we"), Room 5-1, Building 8, No. 81 Jinyu Avenue, Economic Development Park, North New Area, Chongqing, People's Republic of China. We are the controller of the limited personal data described below. For privacy questions, email [email protected].

Your files stay on your device

Every web tool on this site processes your files inside your own browser, and our desktop apps process them on your own computer. Audio, images and text you open are never uploaded to us. Our servers only send you the static pages, the model weights and the app installers.

The desktop apps check license keys offline. Apps that update themselves (Frame-Find, Leaflift, DubForge, K-Forecast, and AIDepthForge from version 1.2) check once a day for a new version: they download the list of versions and a public list of refunded orders from swordfishsoft.org. Everyone gets the same files, and nothing about you, your files or your license key is sent. You can turn this off in the app's Settings. Leaflift also downloads its AI model once, on first launch, from our download server (downloads.swordfishsoft.org); that request carries nothing about you either. DubForge likewise downloads its AI models once, on first launch, from downloads.swordfishsoft.org, with nothing about you in the request. They don't send your files, file names or usage data anywhere. A web page opens in your browser only when you click a link in the app (for example "Buy license").

If you install an app from the Microsoft Store, Microsoft handles the download and updates under the Microsoft Privacy Statement, and the Store version does not check swordfishsoft.org for new versions. It still downloads the public list of refunded orders once a day, as described above. We only receive aggregate install statistics from Microsoft, never anything that identifies you.

What we collect, why, and on what legal basis

• Server logs. Our hosting and content-delivery provider records the requests it serves (IP address, user agent, requested URL, time). We use them to run and secure the service, which is our legitimate interest. They are never linked to the content of your files.
• Aggregate analytics. We use Cloudflare Web Analytics, which sets no cookies and records page views without identifying you. We use it to see which pages are useful (legitimate interest).
• Download counts. When you download an app we count downloads per day and per referring page (for example "from the depth map tool"). We don't store your IP address with the count.
• Purchases. When you buy a license, Paddle, our merchant of record, collects your name, email address, billing country and payment details. We receive your email address, country, the order ID, the product and the amount. We never see your card details. We use this to issue and deliver your license key, help you if you lose it, handle refunds, and meet our accounting and tax obligations. The legal bases are performing our contract with you and complying with the law. We also note which of our pages led to a purchase, but only as totals, to understand what works (legitimate interest).
• Your license key contains the email address you bought with, so the app can show who it is licensed to.
• Emails you send us. We use them to answer you (legitimate interest, or the contract if it's about a purchase).
• Browser storage. Model weights are cached in your browser so they don't need to be downloaded again. They stay on your device, and you can clear them at any time in your browser settings.

Who receives data

• Paddle.com Market Ltd (United Kingdom), our reseller and merchant of record, for everything to do with payments, tax, invoices and refunds. See Paddle's privacy notice.
• Cloudflare, Inc., which hosts the website, the downloads and our license service, and provides the analytics.
• If we start emailing license keys, the email delivery provider that sends them.
• Professional advisers, such as accountants, and authorities when the law requires it.

We don't sell personal data, and we don't use it for advertising.

International transfers

We are based in China, and our service providers operate worldwide, including in the United States and the United Kingdom. Where the law requires it, transfers are covered by appropriate safeguards, such as the providers' standard contractual clauses.

How long we keep it

• Server logs: for the short period our hosting provider keeps them.
• Analytics and download counts: as aggregate numbers only.
• Purchase and license records: for as long as you might need your key re-issued, and at least as long as accounting and tax law requires.
• Support emails: for as long as needed to deal with your request.

Your rights

Depending on where you live, you can ask us to give you a copy of your personal data, to correct it, delete it or restrict its use, to object to our use of it, or to send it to you in a portable format. Where we rely on your consent, you can withdraw it at any time. Email us at the address above. We reply within one month. If you are in the EU or the UK, you can also complain to your local data protection authority.

Security

All traffic uses HTTPS. The key used to sign licenses and the payment-system credentials are stored as encrypted secrets, and only we can access them.

Cookies

This site sets no cookies and shows no ads. If you open the checkout on an app page, Paddle may set cookies that the payment and fraud checks need. Those are covered by Paddle's privacy notice.

Children

Our services are not aimed at children under 16, and we don't knowingly collect their data.

Changes

We may update this policy. The date above shows the current version.