Privacy Policy

The Short Version

Your code never leaves your machine. ShadowGit keeps its snapshots in a .shadowgit.git directory inside each project, and our MCP server gives your AI assistants read-only access to them locally. We can't see that history.

What does leave your machine is listed below: the analytics on this website, your purchase, and what the app sends to validate your license, check for updates, report usage and report crashes. You can turn off the website analytics and the app's usage data at any time.

On This Website

We use two analytics services to see how visitors find ShadowGit and which pages help them decide:

• PostHog (EU cloud, Frankfurt) - the pages you view, how long you stay, page load performance, whether you clicked a download (and for which operating system) or the Buy button, and your cookie choice. PostHog receives your IP address and derives your country from it, and keeps an anonymous visitor ID in your browser's local storage. It sets no cookie.
• Vercel Analytics - page views, referrer, country, browser and device type. It sets no cookie.

Both record page addresses without their query string or fragment, and neither records what you type.

Some pages also load content from other services: videos embedded from YouTube and the badges of sites that featured ShadowGit. Loading them sends your IP address to those services, and YouTube (Google) may set cookies and load its own advertising scripts, under its own privacy policy. The cookie choice above does not cover them.

Analytics run unless you reject them. Choose "Reject" in the cookie banner, or reopen it at any time from "Cookie preferences" in the footer. Your choice is kept in your browser's local storage (shadowgit:cookie-consent), so it applies to this browser only.

When You Buy

Purchases are handled by Polar (polar.sh), our payment processor and merchant of record. Polar collects your name, email address, billing address and payment details to process the payment, issue your invoice and send your license key. We never see your card details. We receive your email address and the license's customer ID so we can support you.

In the App

• License activation and validation - when you activate, the app sends your license key and a hashed machine identifier to Polar. About once a day it sends the license key again to check that the license is still valid.
• Update checks - the app downloads update information and new versions from our update server, hosted on Vercel. Like any download, this request carries your IP address.
• Usage data - the app reports how it is used to PostHog (EU cloud, Frankfurt): launches, settings changes, license activations, projects added or removed, snapshot and restore counts, and failures. Each install gets a random ID; once you activate a license, your email address and Polar customer ID are attached to it. Events also carry the app version, operating system and version, CPU architecture and the country derived from your IP address. Turn it off in Settings → Usage data ("Share usage data").
• Crash and error reports - when something fails, the app sends the error, its stack trace, the app version and your operating system to Sentry. An error message can include a file path from your machine.

Usage data never contains your code, file names, project names or paths, commit messages, tags or license key: only counts, flags and fixed values. The MCP server sends nothing to us.

Why We Process It

• To provide what you bought - payment, license activation and validation, updates and support.
• Our legitimate interest in understanding how the website and the app are used, and in finding and fixing bugs - analytics, usage data and crash reports. You can object at any time with the controls above or by emailing us.

We keep this data only as long as it is needed for these purposes, and never sell it.

Your Rights

• Access - ask what data we hold about you
• Correction and deletion - ask us to fix or delete it
• Objection - object to analytics, usage data or crash reports
• Portability - receive your license data in a portable format
• Complaint - lodge a complaint with a data protection supervisory authority

Email support@shadowgit.com for any of these.

Children's Privacy

ShadowGit is a developer tool. If you're under 13 and writing code that needs disaster recovery, we're impressed, but please get parental consent.

Changes to This Policy

If we change this policy, we'll update the date at the top. Our philosophy won't change: your code stays on your machine.

Contact Us

Questions about privacy? Email us at support@shadowgit.com