RUSHSIFT PRIVACY POLICY

Effective 8 October 2026

This policy covers the RUSHSIFT application for Windows ("the App"), published by LFR Studios ("we", "us"), and the RUSHSIFT website. It explains what data exists, where it lives, and the only situations in which anything leaves your device.

SUMMARY

• No account inside the App, no telemetry, no analytics, no trackers, no advertising identifiers.
• Your footage, your folder names and your search queries are processed on your device and are never uploaded.
• The App makes exactly two kinds of network connection, both described in section 4: a one-time first-run model download, and an optional licence activation that you start yourself.
• The only personal data we can receive is your website email address (section 5) and, if you choose to activate a licence, your licence key together with your Windows device name (section 4).

1. WHAT THE APP DOES

RUSHSIFT indexes the video, photo and camera-RAW files in the folders you choose, on your Windows PC, so you can find a shot by describing it in plain language. All indexing and searching runs locally on your machine, on the CPU, with a search model that operates on your device. RUSHSIFT is a standard desktop program that runs with your Windows user account's permissions; it reads only the folders and drives you give it.

2. INFORMATION WE DO NOT COLLECT

The App has no account system, no telemetry, no analytics SDKs, no crash-reporting services, no advertising identifiers and no automatic update checks. We do not receive your name, email address, payment details, search queries, file names, file contents, or any information about your library. We do not sell, rent or share data with anyone.

3. INFORMATION THE APP PROCESSES ON YOUR DEVICE (NEVER TRANSMITTED)

When you add a folder or plug in a drive, the App reads locally:

• file and folder names and paths;
• technical metadata: duration, dimensions, frame rate, file size, modification time, capture date and time;
• camera make and model, and embedded GPS coordinates that your camera already wrote into the file's metadata. The App does not use the Windows location service; it only reads what is in the file, locally, so features such as time-of-day search work. Those coordinates never leave your device;
• locally generated thumbnails and short preview frames of your media;
• numeric search representations (embeddings) of your media content.

This becomes your local index, stored only on your device:

• Microsoft Store install: %LOCALAPPDATA%\Packages\LFRStudios.Rushsift_61wk22cg5yptm\LocalState\ClipDock
• Other installs: %LOCALAPPDATA%\ClipDock
• Licence status file: %LOCALAPPDATA%\RUSHSIFT\license.json

Nothing in the index is ever uploaded or transmitted. It remains on your device until you delete it, and uninstalling the App does not automatically delete it. Your original files are opened read-only and are never modified, renamed, moved or deleted.

4. THE ONLY NETWORK CONNECTIONS THE APP MAKES

4.1 ONE-TIME MODEL DOWNLOAD (FIRST RUN, STORE INSTALLS)

On its first launch the App downloads its search model (about 1 GB) over HTTPS from huggingface.co and verifies every file against a built-in SHA-256 checksum before using it. This request carries no personal data, only the standard headers any download requires. If the files are already present and verified, no connection is made at all, and once the model is on your device the App works with the internet unplugged.

4.2 OPTIONAL LICENCE ACTIVATION (ONLY IF YOU CHOOSE IT)

If you select "Unlock" and enter a licence key, the App sends a single HTTPS request to our licensing and payment provider, Polar Software (api.polar.sh), containing your licence key and a device label set to your Windows computer name, so that your activations can be identified. No files, folder names, index content or search history are included. The result is saved to license.json on your device, and later launches read that local file instead of contacting Polar. If you tap "Buy", your system browser opens Polar's secure checkout and the App itself sends nothing at that point. Payment card details are handled entirely by Polar and never reach us. Polar's privacy policy: https://polar.sh/legal/privacy-policy

That is the complete list. The App makes no other network requests of any kind. These two connections are the only reason the App declares the standard internetClient capability.

5. OUR WEBSITE

The website (rushsift.vercel.app) is separate from the App and is used for downloads and information. To start a download you sign in with Google or with an email address, handled by Supabase authentication. We receive and store your email address, and your Google account identifier if you choose Google sign-in, only to provide downloads, show your download history, and contact you about them. The website uses no analytics and no advertising cookies, only the session cookie needed to keep you signed in. You can ask us to delete your website account and email at any time (section 9).

6. SERVICE PROVIDERS (THE ONLY THIRD PARTIES INVOLVED)

• Polar Software (polar.sh): licence activation and payment for the optional Pro unlock. It receives your licence key and device-name label, and receives payment details directly from you at checkout, which we never see.
• Hugging Face (huggingface.co): hosts the public model files the App downloads on first run. It receives only a routine file-download request containing no personal data.
• Vercel: hosts our website.
• Supabase: provides website sign-in by email or Google.

No other third party receives any data from the App.

7. CHILDREN

The App and the website are not directed at children under 13, or the minimum age required in your country, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data through the website, contact us and we will delete it.

8. RETENTION AND DELETION

App data: the index and settings stay on your device until you delete them. Removing the folders listed in section 3 removes everything the App created. Website data: your email address and download history stay until you ask us to delete them. Licence records: kept by Polar as required for licence enforcement and accounting, under the policy linked in section 4.

9. YOUR RIGHTS

Depending on where you live (GDPR, UK GDPR, CCPA and similar laws), you may have the right to access, correct, export or delete the personal data we hold about you, which in practice means your website email address and, through Polar, your licence records. Email us and we will respond within the period the law requires. Because all App processing is local, the fastest way to remove your App data is to delete the index folders listed in section 3.

10. CHANGES TO THIS POLICY

We will post any changes on this page and update the effective date above. Continued use of the App after a change means you accept the revised policy.

11. CONTACT

Privacy questions and data requests: diyonquotex@gmail.com Publisher: LFR Studios. Product: RUSHSIFT for Windows.