SHADR / Privacy Policy
Privacy Policy
Your imported media and projects stay on your device. SHADR sends limited pseudonymous product-interaction events without creative content.
Effective 2026-10-07Local creative data
The SHADR iOS app stores projects, imported images, generated previews, presets, and editing settings locally on your device. The browser version processes imported media locally and stores projects in the browser's IndexedDB storage. SHADR does not upload this creative data to its own servers as part of normal editing.
Product analytics and diagnostics
SHADR sends limited pseudonymous product-interaction events to PostHog, such as viewing a website page, opening a tool or Studio, using randomize, importing a source, exporting, interacting with an App Store promotion, and viewing or completing the purchase flow. Events carry two random identifiers and no person profile is created from either. Usage, purchase-flow and diagnostic events can be linked to the same app installation through the device identifier; they are not fully anonymous. A session identifier lasts one app launch or one browser tab. A device identifier persists so that returning visits can be counted rather than counted again as strangers; on iOS it is stored in app preferences and is removed when you delete the app, and on the website it is stored in your browser and is removed when you clear site data. Neither identifier is linked to a name, an account, an email address, or an advertising identifier, and neither is shared with anyone for tracking across other apps or websites. Website events record the referring site's hostname, any utm_source, utm_medium or utm_campaign tags in the address, and a coarse device type (mobile, tablet or desktop) that SHADR's server derives from your browser's identification, which is not passed to PostHog. They omit the page's other query strings and the referring page's path. Pseudonymous error diagnostics include fixed error codes, editing stages, runtime versions, elapsed time, and shipped code filenames with line and column numbers. Apple MetricKit may provide delayed native crash and hang classifications with their original build version. Raw error messages, user file paths, and full stack traces are never sent. SHADR disables GeoIP enrichment, advertising tracking, automatic event capture, and session replay, and honors supported browser privacy signals. Images, videos, project names, text, parameter values, presets, filenames, contacts, location, payment details, and advertising identifiers are never included. Feedback you explicitly submit uses a separate delivery channel, even when browser analytics is disabled. Its text, category, optional email, platform and app version are saved in a private server outbox before we confirm receipt, then delivered to PostHog for support. It carries a random request identifier, not your analytics device or session identifiers. Pending feedback is stored on your device until acknowledged; it retries when the app or website can connect. The private server copy is removed after PostHog accepts it. We use feedback only to improve SHADR and reply if you provide an email. Deleting the app or clearing browser data removes unsent feedback.
Purchases
SHADR Pro purchases are processed by Apple. SHADR receives a verified entitlement state needed to unlock tools, but does not receive your full payment card information. Apple's handling of purchase information is governed by Apple's policies.
Website operation
The website is delivered by a hosting provider. The provider may process limited technical information such as IP address, browser type, requested URL, timestamps, and security logs to deliver and protect the service. SHADR does not use this information for advertising or cross-site tracking.
Exports, sharing, and support
When you export, save, or share work, the destination you choose may process that content under its own terms. If you email support, SHADR receives the email address, message, diagnostic details, and attachments you choose to send. This information is used only to respond, investigate the issue, and maintain necessary support records.
Retention and deletion
Delete individual projects inside SHADR when that action is available, uninstall the iOS app to remove its local app data, or clear site data in your browser to remove Web projects and imported media. Support messages may be retained only as long as reasonably necessary to resolve requests and meet operational or legal obligations.
Changes and contact
This policy may change when SHADR adds accounts, sync, or other online services. The effective date on this page will be updated before those changes apply. Questions about privacy can be sent to chetfatter@gmail.com.