Privacy Policy

Last updated: January 15, 2026

Overview

Shadowspeek is designed with privacy at its core. Your shadow content is encrypted on your device before it ever reaches our servers. We cannot read your encrypted content.

Information We Collect

Information You Provide

  • Public post content: Visible to all users
  • Encrypted shadow content: Stored encrypted; we cannot decrypt it
  • Email address (optional): Used for account recovery and notifications
  • Username and display name: Publicly visible on your posts

Information Collected Automatically

  • Device credentials: WebAuthn public keys for authentication (private keys never leave your device)
  • Push notification tokens: If you enable notifications
  • Basic usage data: Page views, post interactions

How We Use Your Information

  • To provide and maintain the service
  • To authenticate you via WebAuthn
  • To send push notifications you've opted into
  • To send account-related emails (verification, recovery)
  • To improve the service

Data Storage & Security

Your encryption keys are stored locally on your device using the Web Cryptography API and IndexedDB. We use WebAuthn for passwordless authentication, meaning your private credentials never leave your device.

Shadow content is encrypted using AES-256-GCM before transmission. We store only the encrypted ciphertext.

Data Sharing

We do not sell your personal information. We may share data only:

  • With service providers who help operate the platform
  • If required by law or legal process
  • To protect our rights or the safety of users

Your Rights

You can:

  • Access your posts and profile information
  • Delete your local identity and credentials from your device
  • Opt out of push notifications
  • Contact us to request removal of your posts

Cookies & Local Storage

We use localStorage and IndexedDB (not cookies) for authentication and storing your encryption keys. No third-party tracking cookies are used.

Data Retention

Posts remain on the platform indefinitely. If you delete your local identity, your credentials are removed from your device, but your posts remain on the platform attributed to your username. Contact us if you need posts removed.

Children's Privacy

Shadowspeek is not intended for users under 13. We do not knowingly collect information from children.

Changes to This Policy

We may update this policy periodically. We'll notify users of significant changes.

Contact

For privacy-related questions, email us at contact@shadowspeek.com .