Privacy Policy

This Privacy Policy explains how ShadowMirror collects, uses, stores, and shares information when you visit this website, use the contact form, or interact with cookies and analytics controls. ShadowMirror is an editorial website focused on reviews, comparisons, and commentary about self-hosted, open-source, and operator-first software.

We aim to keep data collection limited, understandable, and proportionate to the operation of the site. We do not run invasive ad-tech, cross-site behavioral profiling, or data brokerage on this website.

1. Information We Collect

We may collect information in the following categories:

• Information you provide directly. If you use the contact form, we collect the details you submit, such as your name, email address, and message.
• Technical and security information. Our hosting and security providers may process IP address, request metadata, browser details, referrer information, and similar network-level signals for uptime, fraud prevention, abuse detection, and troubleshooting.
• Cookie preference data. We store your consent choices so the site can remember whether optional analytics is allowed or declined.
• Analytics data. If you opt in, Google Analytics 4 may collect aggregated usage and engagement data, such as page views, approximate geography, device/browser information, and interactions with the site.
• Anti-bot verification data. If the contact form uses Cloudflare Turnstile, Cloudflare may process technical verification signals to help distinguish legitimate submissions from abuse.

2. How We Use Information

We use information we collect to:

• operate, secure, and maintain the website;
• respond to messages, editorial suggestions, partnership inquiries, and support requests sent through the contact form;
• detect abuse, spam, automated attacks, and other misuse of the site or the contact endpoint;
• understand broad site performance and content demand when analytics is enabled by the visitor;
• comply with legal obligations and enforce our Terms of Use.

3. Cookies and Similar Technologies

ShadowMirror uses a limited set of cookies or similar storage technologies. Essential storage is always enabled because it is required to remember your privacy choices and keep the consent experience functional.

Optional analytics stays disabled until you explicitly allow it through the cookie banner or the Cookie settings control in the footer. If you do not opt in, Google Analytics requests are not loaded by the site.

If enabled in the hosting environment, Cloudflare Web Analytics may also be used to measure performance and traffic in a privacy-first manner. You can learn more about cookies and analytics choices by revisiting the cookie settings panel at any time.

4. Third-Party Services and Processors

We may rely on third-party providers to operate the site and process limited data on our behalf. These may include:

• Cloudflare for hosting, delivery, security controls, and Turnstile verification;
• Google Analytics 4 for optional audience measurement after consent;
• workflow or intake providers used to receive and route contact form submissions for editorial or business review.

These providers operate under their own terms and privacy policies. We do not authorize them to use your information for unrelated marketing by ShadowMirror.

5. Contact Form Handling

Messages submitted through the contact form are processed through a server-side proxy before they are forwarded to the configured intake endpoint. This helps keep authorization headers off the client side and reduces abuse.

Please do not send passwords, API keys, private credentials, payment card data, medical data, or other highly sensitive information through the form. The form is intended for general project suggestions, editorial questions, and business inquiries.

6. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this policy, including communication handling, security review, abuse prevention, legal compliance, and record-keeping. Retention periods may vary depending on the type of data and the systems involved.

Contact submissions may be retained for follow-up, editorial evaluation, or operational history. Consent preference data may remain in your browser until it expires or is cleared. Analytics data, where enabled, is retained according to the applicable provider settings.

7. Your Choices and Rights

You can decline optional analytics, adjust cookie preferences, or stop using the site at any time. You may also contact us through the Contact page to request access, correction, or deletion of information you have submitted, subject to applicable law and any legitimate need to retain records for security or compliance purposes.

Depending on where you live, you may have additional rights under privacy laws that apply in your jurisdiction.

8. International Processing

The providers we use may process data in multiple countries. By using the site, you understand that information may be transferred to and processed in jurisdictions outside your own, subject to the safeguards and practices of the relevant service providers.

9. Children’s Privacy

This website is not directed to children, and we do not knowingly collect personal information from children through the site. If you believe a child has submitted personal information through the contact form, contact us through the Contact page so we can review the request.

10. Changes to This Policy

We may update this Privacy Policy from time to time as the website, hosting setup, analytics configuration, or legal requirements change. The version published on this page is the version currently in effect.

11. Contact

For privacy-related questions or requests, use the form on the Contact page. Because this site does not publish a direct contact email, the contact form is the official channel for privacy requests related to ShadowMirror.