Legal
Security
Last updated: 2026 (draft)
Security is a core part of ShadowRaid's design. This page summarizes our approach; specifics will expand as we move toward public release.
Local-first by default
Raw account data stays on your PC. Minimizing what leaves your machine is the simplest, strongest privacy guarantee we can offer.
No credential handling
ShadowRaid never handles your Plarium login. There is no credential to leak because we never collect one.
Signed installers & verified updates
Production installers will be code-signed, and updates are verified against a published manifest hash before they are applied — so you can trust that an update came from Reliquary and was not tampered with.
Secret hygiene
API keys and secrets are never shipped in client code. Cloud services enforce authentication, rate limits, and least-privilege access to your account records.
Reporting a vulnerability
If you believe you have found a security issue, please email security@shadowraid.app. We appreciate responsible disclosure and will respond promptly.