Shadbox

Privacy Policy

Last updated: October 31, 2026

This policy explains what information Shadbox ("we", "us") handles when you use the website, a catalog of shadcn registries and the items inside them.

Summary

  • You can use Shadbox without an account.
  • We do not use advertising or analytics trackers.
  • Your preferences and install cart stay in your browser.
  • Anything you submit in a registry submission is published on the site.

Information we collect

Registry submissions

When you submit a registry, we store the details you enter: its homepage, GitHub repository, registry URL, name, description, categories, headless UI libraries, and logo. These details describe a project rather than a person, and they are shown publicly. Please do not include personal information you would not want published.

Search queries

The terms you type into search are sent to our backend to return results. We do not link them to an account or use them to build a profile of you.

Technical information

Like most websites, our hosting providers process technical data needed to deliver the site and keep it secure, such as your IP address, browser type, and request details.

Cookies and local storage

We use one cookie, which remembers your light or dark theme for up to one year.

We also keep the following in your browser's local storage. It is not sent to us as part of normal use:

  • Your install cart
  • Your column layout preference
  • Your preferred package manager

You can remove all of this at any time by clearing your browser's site data. We do not use cookies for advertising or cross-site tracking, so we do not show a cookie banner.

How we use information

We use this information to:

  • Operate the catalog, search, and component previews
  • Review, import, and display submitted registries
  • Keep the site secure and prevent abuse
  • Fix problems and improve the site

Third-party services

We rely on these providers to run Shadbox, and each handles data under its own privacy policy:

  • Cloudflare hosts and delivers the website.
  • Convex hosts our database and backend functions.
  • OpenRouter generates usage examples for registry items from the published code of those items. Your personal information is not included.
  • Expand retrieves registry files when a registry cannot be reached directly. Only the address of the registry file is shared.

Previews and external content

Registry items come from third parties. When you view an item or a live preview, your browser may connect directly to the registry that publishes it, and to services that supply preview code and packages, such as esm.sh, unpkg, npm, and Hugging Face. Those parties can see your IP address and request details, as with any website you visit.

Links to registries, GitHub, and other sites are governed by those sites' own policies.

Retention

Registry details stay published for as long as the registry is listed. Search queries are not kept as a history tied to you. Technical logs are kept by our hosting providers for limited periods under their own policies.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or object to the processing of your personal information. To make a request, or to ask us to remove a registry you submitted, contact us at the address below.

Children

Shadbox is intended for developers and is not directed at children under 13. We do not knowingly collect their personal information.

Changes to this policy

We may update this policy as the site changes. When we do, we will change the date at the top of this page.

Contact

Questions about this policy can be sent to [contact email].