Shade BrowserIsolation is the security model.
Most products protect your data by guarding a warehouse full of it. We chose not to build the warehouse. Sessions stay on your device, sealed off from each other — so the most valuable target simply doesn't exist on our side.
Session isolation
Cookies, storage, and workers are sealed per session. One compromised tab cannot read its neighbor.
Local-first storage
Your vault never leaves the device. There is no server-side copy of your sessions to steal.
No telemetry
We collect zero usage events. Nothing to breach server-side, nothing to subpoena, nothing to leak.
Encrypted sync, account data only
The only traffic to us is authentication and subscription state — TLS 1.3 in transit, nothing more.
Least-privilege infrastructure
Every internal system gets the minimum access it needs, scoped and logged. No standing admin keys.
Independent mindset
A small team and a deliberately small attack surface — less code, fewer dependencies, fewer surprises.
Found a vulnerability? Report it to security@shadebrowser.com. We acknowledge every report within 48 hours, keep you informed while we fix it, and take no legal action against good-faith research — poke at it, just don't poke at other people's data.
Meaningful reports earn a permanent spot in our hall of fame. The people who break things carefully make this product safer for everyone.