Your data.
Clear choices.

You can review your account identity, manage email verification, and remove your account access from Account settings. This page explains how those account features use your information.

Account information

Email accounts store an email address, a password hash, a display name, and email-verification status. Wallet accounts store linked network identifiers and public wallet addresses. Session records keep you signed in; session cookies are not available to page scripts.

Before account creation

Signup temporarily stores your email, display name, account type, password hash, and a hashed verification code. Your account and sign-in session are created only after the correct code is confirmed. Expired signup requests cannot create accounts and are removed as new signup requests are processed.

Profile photos

Uploading a profile photo is optional. Images are cropped and resized in your browser before a PNG copy is saved with your account. This copy is available only through your signed-in session. You can remove it and return to the default avatar from Profile.

Email delivery

Verification emails are sent through Resend using the sender configured by the site operator. Your recipient email address and verification or password recovery message are provided to that service for delivery. Verification codes expire after 10 minutes and work once. Password reset links expire after 30 minutes and work once. Password changes revoke existing sign-in sessions. The site does not ask for wallet seed phrases.

Marketplace information

Completed report findings are presented as severity-priced listings. Marketplace previews show project context, severity, review confidence, the seller display name, and asking price. Detailed evidence follows existing participant access. Private targets remain within their existing workspace participants.

Your saved listings, seller price preferences, and listing availability settings are stored with your account. Account deletion removes these preferences and hides your listings. The planned payment currency is $SHADOW on Ethereum; no token balance or completed payment is recorded before payment settlement is connected.

Research evidence and review records

Participant-authored research plans, evidence, and owner decisions are stored separately from automated deployment records. Only the originating researcher and target owner can access the workspace. An owner-verified finding contributes to the originating researcher’s private research record; it is not automatically published or listed for sale.

Shared research plans, reports, and review decisions remain under an anonymous account reference after account deletion so the target owner retains historical context. Account access and profile identity are removed as described below.

AI review data

Company applications store legal registration details and the company website. Authorized source revisions, model review results, owner decisions and learning approvals are stored in the company workspace. Source review uses a private local model runtime. Raw, unverified reports are excluded from learning memory.

Resolved educational notes enter company-private learning only with explicit AI reuse and redaction approval. Sharing notes with other companies requires separate publication and reuse permission. Revoked notes are excluded from future retrieval, and changed permissions invalidate an in-progress review before completion. Company workspace records remain private historical records after account removal; removed or suspended identities cannot authorize new reviews.

Browser preferences

Theme, display density, and motion preferences are stored locally in your browser. These preferences are not saved to your server account.

Deleting an account

Account deletion removes the email address, password hash, display name, linked wallets, profile photo, verification codes, password reset tokens, and sessions. Shared workspace records and an anonymous account reference remain so that other users’ historical records are preserved. The account is labeled “Deleted member” and cannot sign in again.

Your choices

Review your linked wallets on your Profile page, adjust browser preferences in Settings, or visit Account settings to manage verification and account deletion.