Privacy is part of the product boundary.

This notice describes the current web application. It does not invent a company identity, jurisdiction, or data practice that the software does not implement.

Private wallet material

Recovery phrases, private keys, and local wallet state are processed in the browser for the active session. Do not use SHADOW on a device you do not trust.

Saved proofs

Proofs created in the application can be stored in browser local storage. Anyone with access to that browser profile may be able to read or export them.

Public network requests

ZEC and XMR operations contact public network endpoints. Those operators may observe normal request metadata such as IP address, time, and requested network data.

Shared credentials

A recipient can retain any credential you share. Review the asset-specific disclosure boundary before sharing, especially the XMR address and proved-total limitation.

Robinhood Chain

The selected Robinhood Chain address authorizes only the completed proof through EIP-712. No ZEC or XMR keys enter the EVM wallet, no asset is bridged, and proof authorization does not submit an on-chain transaction.