Privacy Policy

The short version

• We store your account email, your membership dates, and a record of your orders. That is the core of it.
• We never receive your browsing history, visited URLs, or cookies from the desktop app. That data is written to your own machine and never uploaded.
• Payments run through Cryptomus. We never see wallet keys, seed phrases, or card details.
• No advertising, no cross-site tracking, and no selling of personal data.

Who this covers

This policy applies to the Shadow Browser website, the membership dashboard, and the Shadow Browser desktop application for Windows, operated by Shadow Browser(“we”, “us”).

Information we collect

Account information

Your email address and password are handled by our authentication provider. Passwords are stored only as salted hashes, and we cannot read them. We also keep the timestamps for account creation and sign-in.

Membership information

Your current plan (Trial or Premium), your access expiration date, and a flag recording that a free Trial has been claimed. The desktop app reads these values to decide whether it may run.

Order records

For each purchase we store an internal order reference, the plan bought, the USD amount, the payment status, the payment identifier returned by Cryptomus, and the created and paid timestamps.

Support messages

If you use the contact form we receive the name, email, topic, message, and optional order reference you submit. If you use the in-page assistant, your question is sent to our server so it can be matched against our published FAQ answers.

Technical data

Our servers log ordinary request metadata such as IP address, time, and requested page. We use it for security, abuse prevention, and rate limiting on the contact form, assistant, and checkout.

What stays on your device

The desktop app keeps a separate browser profile per account in your Windows local application data folder. Cookies, site logins, and the last page you visited live there and are never transmitted to us. Your sign-in session is deliberately not written to disk, so closing the app signs you out. Removing the app's local data folder erases that browsing state permanently.

How we use information

• To create your account and let you sign in on the web and in the app.
• To grant, extend, and verify membership access.
• To process crypto payments and reconcile orders.
• To answer your support requests.
• To protect the service against fraud, abuse, and automated attacks.
• To meet legal, accounting, and tax obligations.

Where data-protection law such as the GDPR applies, we rely on performance of our contract with you (accounts, memberships, payments), our legitimate interests (security and abuse prevention), and legal obligations (financial records).

Service providers

We share the minimum necessary data with providers that operate parts of the service on our behalf:

• Supabase — authentication and database hosting for accounts, membership state, and order records.
• Cryptomus — crypto payment processing. You interact with their checkout directly, and they report the payment result back to us.
• EmailJS — delivery of contact form messages to our inbox.
• Our hosting and CDN provider — serving the website and API.
• An AI provider — only if the assistant is configured to use one, in which case your question and our FAQ text are sent to it to compose a reply. Do not put sensitive details into the assistant.

These providers may process data outside your country. We do not sell personal data, and we do not share it for advertising.

Cookies

We use essential cookies only. Authentication cookies keep you signed in and are refreshed as you browse the site. There are no advertising or analytics tracking cookies, so there is nothing to opt out of. Clearing them signs you out.

Blockchain payments are public

Crypto transactions are recorded on public networks that we do not control and cannot alter or erase. Anyone can inspect an address and its transaction history. Consider that before choosing which wallet you pay from.

How long we keep data

• Account and membership data: for as long as your account exists.
• Order records: retained after purchase to satisfy accounting and tax requirements.
• Support messages: kept while needed to resolve your issue and for reference.
• Server logs: kept briefly for security and diagnostics.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise any of these, contact us from the email address on your account through the contact page. Deleting your account forfeits any remaining membership time, and we may keep the minimum order records that law requires.

Security

Traffic to the site and API is encrypted in transit. Passwords are hashed by our authentication provider. Administrative keys are held server-side only and are never shipped in the desktop app or the browser. No system is perfectly secure, so please use a strong, unique password and keep it private.

Children

Shadow Browser is not directed to children, and we do not knowingly collect data from anyone under 16. If you believe a child has created an account, contact us and we will remove it.

Changes to this policy

If we change how we handle data, we will update this page and the date above. Continuing to use the service after a change means you accept the updated policy.

Contact

Questions about privacy can go through the contact page or by email to support@shadowbrowser.app.