ShadowShare Privacy Policy

Last updated: October 11, 2026 · 中文说明

ShadowShare manages, tests and exports proxy nodes. Free node management does not require registration. Account services and member nodes are optional. Internet connections after export are handled by the external client you choose.

1. Information and purposes

• Account and access: Our account service processes your email, a one-way password hash, verification challenges, login sessions, account identifier, membership status and expiry, and generated subscription and node access identifiers. This enables sign-in, verification, password reset and member access. Passwords are not stored in plaintext.
• Purchases: The store and account service process product identifiers, transaction or order identifiers, purchase proofs, renewal status, expiry and restoration results to verify membership and prevent duplicate claims. Purchase proofs held by our account service are encrypted. We do not receive full payment card details.
• Local content: Nodes, subscription addresses, favorites, display names, settings, test results and purchase caches are stored on your device. Clipboard text is processed when you choose to paste or import it. Local backups are created only when you export them. Node links and subscription addresses may contain access information; protect exported files and links.
• Tests and connections: Refreshing subscriptions and testing nodes sends network requests to the relevant subscription, node and test endpoints. Download tests transfer data through the node being tested and consume network and node traffic. Providers can process IP addresses and connection information needed to serve these requests. The managed member node process does not retain destination access logs.
• Diagnostics and analytics: Firebase Analytics and Crashlytics process app interactions, app and operating-system details, installation or device identifiers, crash reports, and performance or diagnostic information. We do not attach account emails, account identifiers, node credentials, subscription URLs or purchase proofs as analytics event fields. These services help us understand feature use and repair failures.
• Advertising: Google AdMob and User Messaging Platform can process IP addresses (which may indicate approximate location), device or advertising identifiers, advertising interactions, app interactions and diagnostic or performance information to provide ads, measurement, consent and fraud prevention. The app does not request precise GPS location for advertising. Data processed by advertising SDKs is not necessarily anonymous.
• Support: We receive the email address and information you choose to include when contacting support. Do not send passwords, verification codes, node access links or payment card details.

2. Permissions

Camera access is requested for QR scanning. If you select an image to scan, the selected image is processed for that action and is not uploaded by ShadowShare. Files are accessed when you choose to import or export nodes or backups. The app does not need contacts or precise location for its node-management features. You can decline optional permissions and still use other features.

3. Service providers and sharing

We do not sell your personal data. App Store or Google Play handle purchases and renewals. Email and hosting providers process the recipient address, verification message and service requests needed for account functions. Firebase and Google's advertising services process the information described above under Google's privacy policy. Subscription, test and external-client services you choose operate under their own policies. Exporting to a client transfers the selected configuration to that client; it can include node access details.

4. Storage, security and retention

Login sessions use secure device storage. Personal member-node access details are held in app memory; a selected external client stores them after export. Account data is stored on our service, purchase proofs are encrypted, and API communication uses HTTPS. Expired verification challenges, sessions and temporary rate-limit records are cleaned up. Local records remain until you delete them, clear app data or uninstall.

Account data is retained while needed to provide the account and membership. Deleting an account removes the email, password hash, sessions, verification challenges and encrypted purchase proofs, and revokes node and subscription access. A pseudonymous account and purchase ownership record without your email is retained to prevent repeat claims of the same store purchase. Service backups are protected and replaced through backup rotation; deletion from the live service does not imply instant removal from every backup. Store, support and third-party records have their own retention processes.

5. Your choices

• Delete saved nodes, favorites and subscriptions in the relevant app screens. Remove configurations already exported in the external client.
• Delete your account in My account, or use the account deletion request page even if the app is uninstalled. Account deletion is permanent and does not cancel a store subscription.
• Manage or cancel renewals in Google Play or App Store subscription settings. The store handles payment records and refunds.
• Use the app's advertising privacy entry where available to review consent choices; device or Google account controls may provide additional options. Denying camera or image access does not prevent link or text import.
• Contact support for questions about your account information or a deletion request. We verify ownership before acting.

6. Children and policy changes

ShadowShare is not directed to children under 13 and we do not knowingly collect their personal information. Contact us if you believe a child has provided account information. We may update this policy when features or data practices change; the date above identifies the current policy.

7. Contact

[email protected]