Legal
Privacy Policy
How we collect, use, and protect your personal information
Last updated: January 8, 2026
Introduction & Transparency Statement
Welcome to Shadow Alchemy. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website, use our tools, or engage with our services.
Shadow Alchemy operates with a foundation of ethical responsibility and transparency. We believe you have the right to understand exactly how your information is handled, and we are dedicated to providing clear, honest communication about our data practices.
This policy applies to all information collected through our website, any related services, sales, marketing, or events. By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy.
Information We Collect
We collect information that you provide directly and information collected automatically when you use our services:
Personal Information You Provide
- Contact Information: Name, email address, phone number
- Account Data: Username, password, account preferences
- Communication Data: Messages, feedback, and correspondence
- Payment Information: Billing address, payment method details (processed securely by third-party providers)
Information Collected Automatically
- Device Information: IP address, browser type, operating system
- Usage Data: Pages visited, time spent, click patterns
- Location Data: General geographic location based on IP address
- Cookies & Tracking: Information collected through cookies and similar technologies
Why We Collect Data
We collect and process your data for specific, legitimate purposes:
- Service Delivery: To provide, maintain, and improve our website and services
- User Experience: To personalize your experience and deliver relevant content
- Communication: To respond to inquiries, send updates, and provide customer support
- Analytics: To understand how users interact with our services and identify improvements
- Marketing: To send promotional materials with your explicit consent
- Legal Compliance: To comply with legal obligations and protect our rights
Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), we process personal data based on the following legal grounds:
- Consent: You have given clear consent for us to process your personal data for specific purposes
- Contract: Processing is necessary to fulfill our contractual obligations to you
- Legitimate Interests: Processing is necessary for our legitimate business interests, provided these do not override your rights
- Legal Obligation: Processing is necessary to comply with legal requirements
Your Rights
Depending on your location, you may have specific rights regarding your personal data:
European Union (GDPR)
- Access: Request copies of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Request limited processing of your data
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw previously given consent at any time
California (CCPA/CPRA)
- Right to Know: Learn what personal information is collected and how it's used
- Right to Delete: Request deletion of personal information
- Right to Opt-Out: Opt out of the sale or sharing of personal information
- Right to Correct: Request correction of inaccurate personal information
- Non-Discrimination: Exercise rights without discriminatory treatment
To exercise any of these rights, please contact us using the information provided in the Contact section below.
Data Retention & Security
Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
- Providing our services to you
- Complying with legal obligations
- Resolving disputes and enforcing agreements
Security Measures
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication measures
- Employee training on data protection
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to implementing best practices.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.
When we transfer data internationally, we ensure appropriate safeguards are in place:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions for countries with equivalent data protection
- Other legally recognized transfer mechanisms
Children's Privacy
Our services are not directed to individuals under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children.
If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly. If you believe we may have collected information from a child, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
When we make changes:
- The "Last updated" date at the top of this policy will be revised
- For significant changes, we may provide additional notice (such as email notification)
- Continued use of our services after changes constitutes acceptance of the updated policy
We encourage you to review this page periodically to stay informed about our data practices.