Privacy

What we collect

• Your email, only if you choose to give it to unlock the detailed results. We use it to send you the recovery protocol and product updates, nothing else.

  Our emails carry a tracking pixel and tracked links, handled by Resend: we learn whether an email was opened and which link was clicked, to measure which emails are worth sending. That is all we do with it.

• Your subscriber account, if you pay for monitoring: the email you sign in with, the handle being monitored, and the check history, which keeps every full audit and every confirmed change Shadowban Recovery records on that handle. Payments are handled by Stripe; we never see your card number, only the payment confirmation Stripe reports back.
• Your personal report, generated after a pass purchase from your own public posts and replies of the last 30 days. We keep that read with the report, along with an automated review of each post and its media by an AI model, so the estimate behind it stays checkable. The report quotes a few short excerpts of your posts. It is sent to you by email and stored against your account until you ask us to remove it (see Your rights below).
• A hash of your IP address, to enforce the daily limit of free checks. It is salted and one way: we cannot recover the address from it.
• Usage analytics, through Vercel Web Analytics and PostHog (hosted in the EU):
  • page views
  • which steps of the check you reach
  • the verdict and score of a check you run
  • whether you opened the payment page
  • the site that referred you
  • approximate location derived from your IP
  • session replays where everything you type is masked

  Your email address is never part of these events.

  In the EU, EEA, UK and Switzerland this only runs with cookies if you accept the consent banner; if you decline, you are counted anonymously with no replay, and the only thing kept on your device is that refusal. Elsewhere it runs by default.

• What you write in the suggestion box under a result, if you choose to send one. It reaches our team with the handle that was on screen and nothing else: no email, no account. Keep personal details out of it, we do not need them.
• Public X data about the handle being checked, fetched at scan time and kept for up to 24 hours.

What we do not do

We never sell or rent your email. Checking an account does not notify anyone, and we never post on your behalf: Shadowban Radar has no access to your X account.

Advertising

The free checker is funded by advertising served by Google AdSense on public pages: the homepage, the blog, the guides and the leaderboard. Ads are never shown in the dashboard, on payment pages, on sign-in pages or on the page of a restricted account. Google and its partners may use cookies and similar identifiers to show ads and measure them.

In the EU, EEA, UK and Switzerland, Google asks for your consent before it uses cookies to personalise ads. You can manage Google's use of your data at policies.google.com/technologies/ads.

If you decline the cookies in our banner, we show no ads at all. Your check results never depend on ads or on this choice.

Public leaderboard

When a test finds no restriction on a public X account, that account enters the daily leaderboard. A restricted or private account is never listed.

The leaderboard only shows what X already makes public, read at the time of the test.

That covers the profile (handle, display name, picture, bio, follower and following counts, Premium badge, creation date), the views, posts and replies of the last 24 hours, the most viewed posts, and the ShadowCreed score with its rank.

An account stays ranked for 30 days after its last test. From day 30 to day 119 its page stays online without a rank and is hidden from search engines. 120 days after the last test, its data is erased. The list of accounts that X no longer serves follows the same 120 days, counted from the last time a test saw the account missing.

The owner of an account can remove it at any time from the Remove my account page. There are two ways: send a private message to @ShadowbanRadar on X from that account (done within 48 hours), or sign in with a pass that covers it. The history is erased, and only the handle is kept, so that the account is never ranked again.

Affiliate links

Some links to third-party tools on a result page are affiliate links: we may be paid if you subscribe, and it never changes what you pay.

Clicking one goes through a redirect on our own domain, where we record the program, the spot the link was in, and the verdict shown on the page. No personal identifier is stored with it: no IP address, no email, no account.

Once you land on a partner site, that company applies its own privacy policy and its own cookies, which we neither set nor read.

Cookies

Fourteen functional or technical cookies set by Shadowban Radar itself:

• sbr_details remembers that you unlocked the detailed results.
• sbr_locale remembers the language you picked for the site, for 1 year.
• sbr_recent_purchase is a signed, technical receipt confirming a payment you just made, so this browser can be sent to the right place if it comes back before you sign in. It expires after 30 days and holds no personal data (a session identifier, the account handles it covers, and an expiry date).
• sbr_capture is the identifier of the email you gave us, so the payment page can be prefilled and a checkout you left can be resumed. It never contains the address itself.
• sbr_checkout lets you resume a payment session you opened and did not finish. It expires after 2 hours and 30 minutes.
• sbr_seen lists the accounts whose result you viewed in the last 24 hours (at most 10 handles), so the result page can tell you when this is your second check of the day. Nothing else is stored in it.
• sbr_seen_susp lists the suspended accounts whose page you viewed in the last 24 hours (at most 10 handles), so the page can offer the pass that covers several accounts. Nothing else is stored in it.
• sbr_currency keeps the currency you picked on the payment page, for one year. Nothing else is stored in it.
• sbr_owner proves, in signed form, that this browser belongs to the person who bought a pass, so you can open your report without signing in again. It expires when the pass ends, at the latest.
• sbr_owner_hint only tells the page that this browser holds the cookie above, so it does not ask our server for visitors who never bought. It holds no personal data and expires with it.
• sbr_checkout_bind proves, in signed form, that this browser opened the payment session, so you can be signed in when you come back from paying. It expires with sbr_checkout.
• monitor_handle keeps the account you asked us to monitor while you sign in, for 30 days.
• The Supabase session cookie keeps you signed in to your dashboard if you subscribe.
• sidebar_state remembers whether you collapsed the dashboard sidebar, for 7 days.

PostHog's analytics cookies depend on where you are: in the EU, EEA, UK and Switzerland they are only set if you accept the consent banner; elsewhere they are set by default to measure how the product is used.

Advertising cookies are described in the Advertising section above and, in the EU, EEA, UK and Switzerland, are only set with your consent.

Your rights

Under the GDPR you can ask for a copy of your data, its correction, or its deletion. Write to hello@shadowbanradar.com and we handle it within 30 days, including deleting your subscriber account and its history entirely. Emails are kept until you ask us to remove them.

Each scan record keeps the handle you check, a timestamp, a salted hash of your IP, the visibility score and verdict we computed, and that account's public display name and profile picture:

• the hash enforces the daily limits;
• the score and verdict let us publish aggregate figures such as the share of checked accounts that are restricted;
• the handle and picture may appear in the public recent-checks strip on the homepage.

Data is hosted in the European Union (Supabase and Vercel); Stripe processes payments, Resend delivers our emails, and an AI model provider reviews the public posts read for a personal report.

Two other providers receive data when you use the product:

• The handle you check is sent to a third-party provider of public X data, based in the United States, that we use to read what X shows publicly about that account; nothing about you personally is sent with it. This is a transfer of data outside the European Union; write to us at hello@shadowbanradar.com for details of the safeguards that apply.
• Our own operations feed posts one line per event (a check, a signup, a payment) to a private Discord channel in the United States, where email addresses are masked: we see the first letter and the domain, never the full address.

If a result page exists for your X account and you want it gone, email us at hello@shadowbanradar.com with the handle. The page is taken down within 72 hours and the handle is excluded from future checks.