Privacy

What happens when you turn the camera on?

Your browser asks for permission to use the camera. If you allow it, Shadow checks the live picture on your own device to estimate whether you are there, whether hands or a phone are visible, and - if you enable it - whether your look direction changed.

Think of it like a mirror with a small helper running beside it: your computer uses the picture to react, but it does not send that picture to our team. We cannot see your live webcam through Shadow. The app does not upload camera images or video, record your session, or save camera footage on our servers.

Does my picture go to an online AI?

No. Camera analysis runs in your browser, on your device. The website downloads the resources it needs to start tracking, but downloading those resources is not the same as uploading your camera feed. The optional guide for your own AI is just a document: attaching it does not connect that AI to your webcam.

The tracking models download from Google's storage service, which receives the ordinary download request, such as your IP address, not a camera picture. Our browser network policy does not allow the tracking library's separate Google performance/usage reporting endpoint. We do not enable that reporting in Shadow.

You stay in control

The camera starts only when you choose to turn it on and allow access. Use Camera off to stop its feed, or close the app tab. You can also remove this site's camera permission in your browser. Pausing the focus timer is not the same as turning the camera off. Shadow does not need microphone access for camera tracking.

What stays in this browser?

Your mission, settings, saved focus history and look calibration stay in this browser on your device. Other browsers and devices have their own setup. Clearing this site's stored data removes local settings and history, but does not cancel purchased account access. Paid access also keeps a private activation key in this browser. Clearing site data can remove that key and require moving your activation. The key is separate from your camera profiles.

How does the browser license work?

One purchase uses one active browser profile. Your browser keeps its private activation key; our server keeps a one-way reference to its public key, the active version and activation or transfer times. The browser proves it still has its key when checking access. This does not scan your files, identify your physical computer or send your webcam picture. We do not use hardware fingerprinting for this license. Brief verification records help stop repeated requests and reused proofs; expired records are cleaned up during later checks. Changing browsers or clearing site data may require moving access, but does not cancel the purchase tied to your email.

What does still use the internet?

The website must load, and signing in and checking your access use online services. JD Anastasio LLC processes the sign-in email, access status and purchase references needed to manage your account. Payment providers process checkout details under the terms shown at checkout; we do not store your complete card number.

Hosting and account services may process ordinary technical records, such as request times and IP addresses, to deliver and protect the service. Those are separate from the webcam picture. If you deliberately send feedback or contact support, the information you choose to send is shared with us. The help form emails your reply address, message, category and optional rating to our team through our email provider. It does not attach webcam pictures or work history. Short-lived hashed sending references help prevent spam; these are separate from the contents of your message. Do not include passwords, access codes, card details or private camera footage.

Website visit statistics

We use Vercel Web Analytics to count visits and page views on our website, including the sign-in and account pages. Reports show which pages are visited, referring websites, countries and device or browser categories. This helps us understand whether people find Shadow and reach the purchase steps.

This measurement uses no analytics cookies or session recordings. Vercel derives a short-lived visitor reference from the request and discards that reference after 24 hours. Visitor numbers are estimates, not an identification of individual people. We remove query strings and URL fragments before sending page views, exclude the app, access codes, authentication callbacks and admin pages, and do not send your account email, camera feed, mission or focus history to Web Analytics. Do Not Track and Global Privacy Control browser signals disable this visit measurement. The purchase and access records described below remain separate.

Account information and privacy requests

We record purchase-button signals, checkout starts and technical failures to understand where buying fails. A random reference in this tab expires after 30 minutes and can connect a click with checkout; it is not a cross-site tracker or a count of individual people. Signed-in attempts can be linked to your account and payment reference. These operational signals are kept for up to 90 days, with expired records removed during subsequent collection. Payment and refund records have the separate retention described below. Reports exclude our internal tests by default. No camera, focus history, card number or advertising profile is included.

JD Anastasio LLC is responsible for the account and support information it uses to provide this product. We use that information for sign-in, access, customer support and fraud prevention, not to sell your webcam picture or create an advertising profile from it. Necessary sign-in and access cookies are separate from camera permission. Our business and mailing address is 3422 Old Capitol Trl, Ste 333, Wilmington, DE 19808, United States.

We use account and purchase data to perform the product contract, security records for our legitimate interest in preventing fraud and protecting the service, and records required by law for legal compliance. We use messages you send to answer your request. We do not use your camera feed for advertising, identify you by your face, sell personal information or use advertising trackers in Shadow. Optional features can be turned off without agreeing to marketing.

Our providers include Vercel for hosting and website visit statistics, Supabase for account and access storage, Cloudflare Turnstile for sign-in bot protection, Resend for sending support mail, and Microsoft for our support mailbox. Stripe and Sold through Link process checkout, payments, receipts and transaction support under their own privacy notices. These online providers handle their necessary service data; none receives a webcam feed from Shadow. We share data as necessary with these providers, or where law requires it, not with a public audience.

Online account and support information may be processed by our service providers in the United States or other countries outside yours. Where required, transfers need safeguards such as applicable standard contractual clauses; you can ask us about the applicable arrangements. We keep account and activation records while needed to provide and recover your purchased access, support correspondence while needed to handle and follow up your request, and purchase records for required accounting, dispute and legal retention periods. Security proof and sending-limit records are short-lived and expire separately. We do not keep records merely because storage is possible; clearing your browser does not delete those records. Depending on applicable law, you may request access, correction or deletion of your personal information, restriction, objection or portability where applicable, or raise a privacy concern, through I need help without an account, or write to our mailing address. We may need to verify that the account is yours and respond within the deadlines required by applicable law. You can also contact your applicable data-protection authority. Deleting information needed for account access can end that access; legal record-keeping requirements can limit what we can delete.

Local notes and history are shared with people using the same browser profile. Camera profiles are saved settings, not separate private accounts. Use your browser and computer's own protections when sharing a computer. Your rights under applicable privacy law are not waived by this explanation.

The product is not directed to children under 13. Do not submit their personal information. Tell us if it was sent by mistake so we can investigate and remove it where appropriate. Changes to this notice are dated; material changes are communicated as required. No medical or similarly significant decision about you is made from camera detection, and detection is not an identity check.