SYSTEM SCAN COMPLETE
01. What Are Cookies?
Cookies are small text files placed on your device by websites or applications to store information about your preferences, session state, or browsing behaviour[cite: 4]. They are widely used across the web to enable functionality, remember user preferences, and — in many cases — track users across websites for advertising purposes[cite: 4].
This Cookie Policy explains how ShadowSurf Technologies handles cookies and similar tracking technologies in both our Android application and this website[cite: 4].
02. Our Position on Cookies
We believe that the widespread use of tracking cookies is one of the most significant threats to user privacy on the modern web[cite: 4]. ShadowSurf was built specifically to block these technologies for our users — and we hold ourselves to the same standard[cite: 4].
ShadowSurf Technologies does not use tracking cookies, advertising cookies, or any cross-site tracking technologies in our Android application[cite: 4]. This is a core principle of our Privacy by Design architecture — not a configuration choice[cite: 4].
03. Local Storage & App Data
The ShadowSurf application stores certain data locally on your device to provide core functionality[cite: 4]. This data never leaves your device and is not accessible to our servers[cite: 4]. It includes:
- Browser session data — active tabs, scroll position, and form autofill (stored in Android's sandboxed app storage)[cite: 4].
- Bookmarks and browsing history — stored locally and never synced to our servers[cite: 4].
- App preferences and settings — your chosen theme, search engine, and privacy settings[cite: 4].
- Ghost Vault contents — encrypted files and media stored in isolated, sandboxed local storage[cite: 4].
- Website cookies set by third-party websites you visit — these are managed by the browser engine and are subject to the privacy policies of those websites, not ours[cite: 4].
You can clear all locally stored browser data at any time from within the ShadowSurf app settings under Privacy & Security → Clear Browsing Data[cite: 4].
04. Third-Party SDKs & Their Data Practices
ShadowSurf integrates a small number of third-party SDKs to provide specific features[cite: 4]. Each SDK's data practices are described below:
05. Analytics & Crash Reporting
We use Google Firebase Crashlytics on a strictly opt-in basis to collect anonymous crash reports[cite: 4]. This helps us identify and fix bugs quickly[cite: 4]. Crashlytics does not use cookies and does not track your browsing behaviour[cite: 4].
You can opt out of crash reporting at any time from within the app: Settings → Privacy & Security → Share Crash Reports → Off[cite: 4].
We do not use Google Analytics, Facebook Pixel, or any behavioural analytics platform in the ShadowSurf application[cite: 4].
06. Advertising Identifiers (Free Tier Only)
This section applies only to users of the free tier of ShadowSurf[cite: 4]. Premium subscribers are not subject to any advertising[cite: 4].
Free tier users may be shown interstitial advertisements served by Google AdMob[cite: 4]. AdMob may use the Android Advertising ID (AAID) — a resettable, non-permanent identifier — to serve contextual advertisements[cite: 4]. This identifier is not linked to your name, email address, or any other personally identifiable information held by ShadowSurf Technologies[cite: 4].
You can reset or opt out of personalised advertising at any time through your Android device settings: Settings → Google → Ads → Delete advertising ID or Opt out of Ads Personalisation[cite: 4].
07. Your Choices & Controls
You have full control over the data stored by ShadowSurf on your device[cite: 4]:
08. This Website
This website does not use tracking cookies, advertising cookies, or third-party analytics scripts[cite: 4]. We do not use Google Analytics, Facebook Pixel, or any similar tracking technology on this website[cite: 4].
The website may use strictly necessary technical mechanisms (such as session storage) to maintain your navigation state[cite: 4]. These are not tracking cookies and do not collect personal data[cite: 4].
No cookie consent banner is required on this website because we do not set any non-essential cookies[cite: 4]. This is intentional and reflects our commitment to privacy[cite: 4].
09. Support & Inquiries
For questions regarding data practices, privacy rights, or policy inquiries, please bypass this document and connect directly through our secure terminal.
INITIATE SECURE COMMS ROUTELast updated: April 30, 2026[cite: 4]. Subject to change based on cyber compliance laws.