Privacy
Privacy policy
Last updated 22 August 2026.
We sell privacy-focused phones, so it would be strange to run a storefront that harvested you. This page describes exactly what we collect, why, and who else sees it. It describes what the site actually does — not what a template says it might do.
What this site does not do
- No analytics. No Google Analytics, no pixels, no session recording, no heatmaps.
- No advertising or tracking cookies. We set no cookie at all for ordinary browsing.
- No third-party requests. Fonts, styles and scripts are served from this domain. Loading a page contacts nobody but us.
- We never sell or rent your information, and we don't share it for advertising.
What we collect
When you buy
Checkout is handled by Stripe. They collect your name, email address, phone number, billing details and — if you're having it shipped — your shipping address, and pass those to us so we can fulfil the order.
Your card details never reach our servers. We never see or store your card number; Stripe handles payment and we receive only a reference to it.
When you contact us
The contact form stores the name, email address, optional subject and order reference, and the message you send, so we can reply and keep a record of the conversation.
When you view your orders
There are no accounts and no passwords. You enter your email address and we send a signed link that expires after seven days. We store nothing extra to make that work.
Abuse prevention
To stop the contact form and order-link form being flooded, we record a salted hash of the requesting IP address — a one-way fingerprint. We do not store raw IP addresses for this, and the hash can't be reversed into an address.
Our web server keeps standard access logs, which do include IP addresses, for security and troubleshooting. They rotate and are discarded.
Who else sees your information
- Stripe — payment processing. Governed by their own privacy policy.
- Our email provider — delivers your receipt, order updates and replies.
- The shipping carrier — receives your name and address, because a parcel cannot be delivered without them.
Our hardware supplier does not receive your details. Handsets are shipped to us, we build them here, and we ship to you. Your name and address never go upstream.
We will disclose information if the law actually requires it — a valid subpoena, warrant or court order. We have no interest in volunteering it.
Cookies
Browsing and buying set no cookies. The only cookie this site can set is a session cookie for the operator console at /admin, which is for us, not for you.
How long we keep things
- Order records — kept while we may need them for warranty, returns, accounting and tax. Typically several years, because tax law says so.
- Contact messages — kept while the conversation is useful, then deleted.
- Rate-limit hashes — short-lived, used only to count recent requests.
Your choices
Ask us and we'll tell you what we hold about you, correct it, or delete it. We may have to keep records tied to a completed sale where tax or warranty law requires it — we'll say so if that applies. Depending on where you live you may have additional statutory rights; we'll honour them.
Send us a message to make any of these requests.
Security
The site is served over HTTPS only. Payment card data is handled entirely by Stripe. Access to order records is restricted to the operator.
No system is perfect. If you find a security problem here, please tell us — we would much rather hear it from you.
Children
This shop isn't directed at children under 13, and we don't knowingly collect their information.
Changes
If this policy changes we'll update the date at the top. Material changes will be called out on this page rather than slipped in quietly.
Who we are
ShadowPhones is operated by Gifted Hacker, LLC, an Idaho limited liability company. Questions about this policy: send us a message.