Privacy Policy

1. Who we are

Shadow operates hideshadow.app and publishes the Shadow desktop app and the Shadow Mobile iPhone app. Questions about this policy go to support@hideshadow.app.

Payments are processed by Whop, Inc. ("Whop"). Whop is the merchant on your receipt and your card statement, and Whop's own privacy policy governs the payment details you enter into its checkout.

2. What the website collects

When you visit the site we store a small acquisition record so we can understand which channels bring people to Shadow and pay the partners who referred them. That record contains:

• A random visitor identifier we create in your browser's local storage (it looks like wa_ followed by letters and digits). It is not linked to your name or email.
• The page you landed on, the page that referred you, and any campaign parameters in the link you followed (for example utm_source or an advertising click id).
• Your IP address and browser user agent at the time of the visit.
• A coarse device class (desktop, phone or tablet).
• If a Meta or TikTok advertising cookie is already present in your browser, its value, so a purchase can be attributed to the ad you clicked.

If you arrive through a partner link, we also record the click for that partner (their id and any sub-ids in the link), together with the same visitor identifier.

When you ask us to email you the download link, we send one email and store nothing; your address is not written to any database.

3. What we collect when you buy

You enter your email on our checkout page and your payment details inside Whop's embedded checkout. We never see your card number. From Whop we receive the payment status, the plan you bought, the billing email, and a payment identifier.

We attach the visitor identifier, the acquisition record and any partner id to the purchase so the sale is attributed correctly and so we can honour promotional offers.

Purchases that include Shadow Mobile, Lifetime or the 3-day pass generate a licence key, which we email to you and keep on file with the purchase so it can be re-sent or revoked.

4. What the apps collect

The desktop app and Shadow Mobile identify your installation and device to our servers so that a licence can be tied to the devices it is used on ("device binding") and so that trials and refunds cannot be abused. This includes an installation id and a hashed machine or device identifier.

The apps do not send us the locations you simulate. Location simulation happens between your computer and your iPhone; the map you see is loaded from a map provider like any other map, and the coordinates you choose are not reported to Shadow.

The apps check our servers for the current version, your entitlement, and service notices.

5. Cookies, local storage and pixels

The site uses browser local storage (not cookies) for the visitor identifier, the acquisition id, a remembered partner link (30 days) and the last checkout you started (so the confirmation page can find it).

We may load Meta and TikTok advertising pixels. At the time of this policy they are switched off. If they are enabled, they will be disclosed here and, where required, gated behind a consent banner.

Whop's embedded checkout sets its own cookies under whop.com; see Whop's privacy policy for those.

6. Why we process this data

• To perform the contract with you: sell the licence, deliver the key, unlock the apps, and provide support.
• Our legitimate interest in measuring marketing, paying referral partners accurately, and preventing fraud and abuse of trials and refunds.
• Your consent, where a law requires it for advertising pixels.

7. Who we share it with

• Whop, Inc. — payment processing, receipts, renewals and refunds.
• Supabase — our database and serverless functions host.
• Vercel — hosting for this website (it also sees your IP address and country to serve the page).
• Resend — transactional email delivery (licence keys, download links, sign-in codes).
• Meta and TikTok — only if pixels are enabled, and only the event data described above.
• Referral partners see aggregate statistics about the clicks and sales attributed to them, never your email or payment details.

We do not sell personal data.

8. Retention

Acquisition and partner-click records are kept for as long as they are needed to reconcile referral payments and analyse marketing, and are then deleted or anonymised. Purchase, licence and device-binding records are kept for the life of the licence and as long as we must keep them for tax and accounting purposes. Support emails and Discord tickets are kept as long as needed to resolve the issue and to guard against repeat abuse.

9. Your rights

Depending on where you live you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, and to withdraw consent. Email support@hideshadow.app from the address you purchased with and we will act on it. You can also complain to your local data-protection authority.

To clear the site's local storage, use your browser's site-data settings for hideshadow.app.

10. Children

Shadow is not directed at children under 16 and we do not knowingly collect their data.

11. Changes

We will post any change here with a new "last updated" date. Material changes will also be announced in our Discord.