Skip to content
Legal
Privacy Policy
Your cloud, your data. Last updated October 14, 2026.
Overview
shadw is a cloud you can self-host. When you self-host, your application data, deployments, and durable storage live on nodes you operate. On the hosted service they live on nodes run by the shadw operators. This policy describes what the hosted dashboard and managed services collect.
Data we collect
Account details (name, email, organization) for authentication; project and deployment metadata to run the dashboard; and page-load performance measurements (Core Web Vitals) that a first-party beacon sends together with the URL of the page. Environment variables marked sensitive, and values that look like credentials, are encrypted at rest.
Your application data
Deployments, databases, and durable data are stored on the nodes that run them. On the hosted service, platform operators can read platform records across all tenants through operator-only admin routes, including projects, deployments, databases, domains, workflow runs, request events, billing, and audit entries.
DNS & domains
When you bring a domain into the DNS console, we store the records you configure to answer DNS queries and to attach domains to deployments. You can import and delete these records at any time.
Cookies & sessions
We use first-party cookies strictly to keep you signed in and to remember your active team. No third-party advertising trackers.
Data retention & deletion
You can delete projects, deployments, and individual DNS records, and detach domains from projects, from the dashboard. Account deletion is not implemented in the dashboard. Deleting a resource removes the resource itself; project tombstones (the project name and deletion time) and the append-only audit history persist, and request-event history is kept for 30 days by default. Self-hosted data is removed when you remove it from your nodes.
Contact
Questions about privacy or a data request? Email privacy@shadw.cloud.