Last updated: February 19, 2026
Shadow runs entirely on your local machine. No data is collected, transmitted, or stored by Shadow or its authors.
This website (useshadow.dev) is a static page hosted on Cloudflare Pages. We do not use cookies, analytics, tracking scripts, or any form of user monitoring. No personal information is collected through this website.
The mcp-shadow npm package does not phone home, collect telemetry, or transmit any data. All simulations run locally using an in-memory SQLite database that is destroyed when the process exits.
Shadow does not share data with any third parties. If you use Shadow with an AI agent that has its own API key (e.g., OpenAI, Anthropic), that agent's API calls are governed by the respective provider's privacy policy — Shadow has no involvement in those calls.
Questions about this policy? Open an issue on GitHub.