LEGAL & COMPLIANCE
Privacy Policy
Shadow Lab strictly respects and safeguards every user's personal privacy and data security.
Effective Date: February 1, 2026•Last Updated: September 16, 2026
Shadow Lab ("we", "us", or "our", available at shadow.wang) was founded and is operated by Ward. We understand the importance of personal data and are dedicated to protecting your information and privacy. This Privacy Policy details how we collect, use, store, and protect your data when you visit our website and use our products (such as Quick flomo, Shadow Card, Shadow Mate, and others).
1. Information We Collect and How We Collect It
We follow data minimization principles strictly:
• Account & Authentication: When you sign in or request product access, we collect only your email address to deliver one-time passcodes (OTP). We do not require phone numbers or third-party real-name bindings.
• Anonymous Usage & Analytics: We use Google Analytics 4 (GA4) for aggregated, anonymous website traffic and interaction metrics. Data masking is strictly enforced, and no Personally Identifiable Information (PII) is ever transmitted to Google.
• Zero Ads & No Data Selling: Shadow Lab never displays third-party ad networks (such as Google AdSense), and we will never sell, rent, lease, or trade user data to any commercial third parties.
2. Data Storage and Security Safeguards
We employ rigorous technical safeguards:
• Encryption in Transit: All website traffic and API endpoints strictly mandate TLS 1.3 / HTTPS encryption to prevent eavesdropping and tampering.
• Storage & Access Controls: Production databases reside on secure Supabase / PostgreSQL cloud infrastructure with Row Level Security (RLS) and least-privilege policies.
• Token Security: Authentication is managed through short-lived cryptographic tokens, with private keys protected in server environment variables that are never exposed to the client.
3. Cookies and Local Storage
We utilize cookies and browser storage (LocalStorage / SessionStorage) strictly for essential functionality:
• Language Preference: Remembering your selected locale (ZH / EN) across visits.
• Session Management: Securely maintaining your authenticated session when signed in.
• You can clear or disable cookies in your browser settings at any time without affecting your ability to browse public product pages and blog insights.
4. Your Rights and Data Control
In compliance with applicable privacy regulations, you retain full rights over your data:
• Access & Export: You may request details of the information associated with your account.
• Rectification & Deletion: If you wish to delete your account and all associated historical data, email wardlu@126.com and we will fulfill your request within 5 business days.
• Withdrawal of Consent: You may discontinue using our services at any time to cease further data collection.
5. Policy Updates and Contact Information
We may update this Privacy Policy from time to time to reflect product updates or regulatory requirements. Significant revisions will be reflected on this page with an updated "Last Updated" timestamp.
For any privacy questions or requests, please contact the founder directly:
• Email: wardlu@126.com
• Website: https://shadow.wang