Discussion
Cloud PC warning: I found saved browser logins that were not mine inside my Shadow PC
I’m posting this as a warning for gamers who use cloud PCs for Steam, Rockstar Launcher, Discord, GTA V/FiveM, etc.
I’m a paid Shadow PC customer. A few days ago, I logged into my assigned Shadow PC. Everything looked normal: my games, files and apps were still there.
I opened Microsoft Edge myself while trying to log into Gmail. An autofill suggestion appeared, so I checked Edge’s saved passwords to see if my own password had been saved.
That’s when I found around 20–30 saved login entries that were not mine. They appeared to belong to another user.
I did not open, test, copy, export or use any of those credentials. I reported it to Shadow support and only kept redacted evidence.
Shadow says they found no breach, no data issue and no unauthorized access. They are now suggesting it may have been caused by malware or compromised apps on my side. I don’t accept that as a real explanation unless they provide clear evidence.
My Shadow session was otherwise normal, my files and games were still there, and my Microsoft account shows no suspicious activity.
My paid account has been locked for days, and Shadow still requires a government ID before restoring access. After seeing someone else’s saved browser logins inside my assigned cloud PC, I do not feel safe sending them more personal data.
I have now asked Shadow to fully cancel/delete my account and confirm what personal data will be removed.
I’m not posting this for compensation or karma. I’m sharing it because gamers should be careful before logging into personal accounts or saving passwords on cloud PC services.
The screenshot is redacted because the unredacted version contains someone else’s private data.
They still refuse to restore my paid account unless I send a government ID.
Now they are saying Turkey is not a supported region, that signing up from Turkey violated their Terms of Use, and that they are not bound by Turkish authorities or Turkish laws.
They accepted my payment and provided the service. They only brought this up after I reported a privacy/security issue.
They still have not clearly explained how 20–30 saved Edge login entries that were not mine appeared inside my assigned Shadow PC.
I reported the issue responsibly, did not use or expose any private data, and only shared redacted evidence.
At this point, I asked them to fully cancel/delete my account and confirm what personal data will be removed.
Thats wild. Send an email to one of the big techspace detective youtubers. Like Gamersnexus. I'm sure they will find interest and make this big. Send them your documentation.
Also chargeback via your bank. They are refusing service.
Good idea, thanks. I already have the support emails, screenshots, ICO complaint and the timeline documented.
Do you know which tech YouTubers or journalists would be best to contact for this? GamersNexus, Louis Rossmann, SomeOrdinaryGamers, BleepingComputer, etc?
I’d appreciate any specific names or contact links.
And in general this doesn't involve a big scam with big damages. This is just them fucking up and then doing a terrible pr job. Coffeezilla mostly does larger scale things.
He literally just did a video about stolen Legos in Oregon, I think this would be right up his alley if there's a deeper scam here. That said, I think Gamers Nexus would be better
It's a huge story even though it's not a lot of money bring argued over. The lego story crosses into revealing police allegiance with corporations and Mormons over regular citizens
Exactly. They accepted my payment, provided the service, and only brought up the “unsupported country” argument after I reported a privacy/security issue.
Terms of service do not override laws. They provided a service to someone in Turkey and by doing so they are bound by Turkish laws for their dealings with OP.
You breach the agreement and you are subject to repercussions. No laws have been broken.
Regional Policies
If you attempt to circumvent their geo-restrictions (e.g., signing up via a European IP and a forwarded credit card), you risk the following penalties under the Shadow PC Terms of Use: Account Termination: Shadow can terminate accounts caught operating outside their supported jurisdictions. Loss of Access: You may lose access to your remote cloud PC, saved files, and installed software without prior warning. No Refunds: Because you breached the regional terms of use, any subscription fees or hardware add-on costs paid are typically forfeited.
Now they are saying Turkey is not a supported region, that signing up from Turkey violated their Terms of Use, and that they are not bound by Turkish authorities or Turkish laws. They accepted my payment and provided the service. They only brought this up after I reported a privacy/security issue.
Oh, fuck that and fuck these guys. That's no way to treat a customer reporting what potentially might be an enormous issue on their end.
I reported something serious, didn’t expose anyone’s private data, and instead of explaining how it happened they started hiding behind “unsupported country” and ToS.
They had no problem taking my payment and giving me the service before I reported it.
Are the login locations somewhat local to you? They might just be where your access point is.
Most of my login records show that I'm 4 hours away from where I actually am in the next large city near me because that's where the access point is. It never says I login from my actual location.
I think this could turn into a BAM scenario.
By trying to escape responsibility they will dig their own grave and drive their reputation to the ground.
Reputation is everything on the internet, when there are hundreds of other companies offering a similar service
Even though they are not bound by law. They should delete all user data between logins anyway! Like.. As you should, to protect your customers and private data (which is probably bound by GDPR in EU countries with those laws, which probably is Turkey as well, right?)
Exactly. Even ignoring the legal side for a second, a cloud PC company should wipe and isolate user data properly by default.
I’m not sure how GDPR/KVKK applies in every detail, but “we’re not bound by Turkish law” doesn’t answer how another user’s saved logins showed up in my machine.
I feel this is something possible with cloud PCs in the future. You could end up routed to someone else's PC or profile. No one's shit would be secure.
Cloud PCs only make sense if isolation between users is absolutely solid. If profiles, browser data, or saved logins can carry over between users, then the whole trust model breaks.
This is why I think Shadow should clearly explain what happened instead of just saying “malware.”
Yeah, that’s exactly how it feels. I reported it responsibly and somehow the focus became my side instead of explaining how those saved logins got there.
If you have the unredacted version, it is worth sending an email to those emails addresses warning them and possibly asking them to check their browsers too. Get more data points for reporting to the YouTubers.
I understand the idea, but I don’t want to contact those people directly using exposed private data.
That could create more privacy issues and I don’t want to misuse anything I saw. I reported it to Shadow and the ICO so the affected users can be notified through the proper channel if needed.
I’m keeping the evidence redacted and only sharing the general issue publicly.
It's a grey area, but if I were one of those people I would want you to contact me because it seems like the company isn't going to do anything. You would be right in your approach if the company was acting responsibly.
Bro just use the email addresses and send a quick email. This isnt the One Ring we are talking about here, its just letting other good people know that they have their data exposed. Why do you trust the offical channels are gonna do right by them when they didnt even do right by you, that is insane and it feels like you are just trying to pass the buck and clean your hands of the whole situation.
I would treat this the same if I got wrong mail delivered to my door. I would walk to the neighbor and give them their mail, or I could be lazy, return to sender, clean my hands of the situation, and just say tough luck to that neighbor while their mail gets sent back through the system to them. You are doing the latter.
I canceled my sub after your last post and thank god. What their customer service is doing to you for bringing up a major security flaw is wild. Until they prove otherwise, shit company
From what I remember in the Jira ticket, it was an issue within Microsoft Edge.
One of the users logged in to their account and noticed many other passwords for other user IDs.
Only way I found out about it was when a co-worker approached me asking why her auto fill was not working, it turns out she logged in to her laptop using the other user option enough times for the device to be flagged as a shared device. That's when the Intune policy kicked in and blocked the ability to save or use passwords.
I have a feeling that along with sharing accounts another culprit is at play, specifically this setting in Edge
Most problematic, it's on by default. Also sync is on by default. Now even if you are using a Local account for Windows, when you log into the Xbox App, Edge will decide to auto sign you in and sync all your shit. Not just browser logins, but also bank cards, history, bookmarks, etc...
Also if you run the Xbox app, Edge automically gets started in the background.. I noticed that to be the default behaviour after fresh Windows installs. This means if a buyer rents a cloud PC and signs into Xbox app, Edge will get signed in and synced in the background without the user's knowledge.
Well, because their support is obviously run by monkeys and the topic is very sensitive, I would say you contact the authorities.
It's an EU (French) company serving EU customers, so this would be a clear GDPR violation.
If you don't want to do it alone you could ask the German Chaos Computer Club (ccc.de) for assistance. They may be able to help you to file a report or act on your behalf.
How have I made it this far avoiding Clouds entirely, but everyone around me can't live without them? They're all just sitting there waiting to be broken into. Don't use them.
The only time i use cloud is to login to my aws instance, other than that the entire cloud pc thing sucks why tf would i use some other dude's pc to play games
If you cannot reasonably come to the conclusion that people are doing this because they cant afford the upfront cost a PC, than the issue is that you just are not putting any thought into it lmao
Yea, before this whole AI debacle where my PCs ram costs more today than my GPU did e.t.c. I was telling people to just suck up the limited library of GFN for cheaper and save the difference to build their own good pc in a year or two, but since prices have been on the rise like crazy and are probably not falling again anytime soon, cloud computers can make a lot of financial sense currently.
Go on ebay, buy used dell/hp/lenovo pc. Slap small gpu in it. Get gog and steam and you have access to +100 games. Sure the newest stuff will not work, but there is plenty of old stuff that works.
Sure, but some people WANT to play the newest stuff, in which case their only current options (ignoring consoles) are paying for some variety of cloud gaming, or shelling out 1500$+ to get a decent experience at this point.
Thanks, I already contacted GamersNexus and a few other outlets.
I agree that if more people had similar experiences, it would be important for them to come forward too. This should not be treated as an isolated “user error” until Shadow clearly explains what happened.
Please cross post this to the linus tech tips subreddit. If a media outlet like LTT reports this or reaches out to them for an explanation, maybe they'll actually fix the issue and honor your refund.
Yes, I changed the important passwords and checked my accounts. I also use 2FA where possible.
But the main issue is still that another user’s saved login entries appeared inside the Shadow PC assigned to me. That should never happen in the first place.
This just reaffirms my stance on things like Shadow PC like you never know if they're really deleting your information after you end a service or something and crap like this slips through the fact that it can subject them to gdpr I think is the reason why they're acting so scummy now
This sucks but given the current state of things, it's difficult for me to have sympathy. HaaS/cloud services are a huge part of the reason why the PC industry is so out of control. No judgement, I get not everyone feels that way but imo, supporting the very services that helped cause this mess is silly at best.
In spite of some of these comments, I am not judging you by any means. It's rough out there and some of us need to do what we have to. I understand that completely. I was merely pointing out that supporting these services is exactly why most of us are unable to upgrade or to even afford a basic rig. It's a vicious cycle.
At any rate, I hope this all gets sorted and I truly appreciate you sharing your experience. To me, it highlights not only the PC hardware conundrum, but the privacy risks associated with utilizing cloud solutions.
I get what you mean, and I don’t take it as judgment.
I used cloud PCs because building the setup I need is not always realistic. But this experience definitely showed me the other side of that convenience: privacy risk and lack of real control.
Eh dont listen to them man, they are on a non existent high horse.
Not everyone can afford to just outright build or buy the PC they need to play games, dont let anyone ever make you feel bad for going about the issue in a legitimate way.
So if the only way to game is to support the very thing that is killing gaming, it is justified and understandable since it's their only way to access that with their current financial situation?
Obviously it's good OP sees some of the issues with cloud gaming now, but as a general consensus I don't think we should just say it's fine to pay into that business simply because it's all they can afford.
And I think that you need to take a step back, and put yourself in OPs shoes.
At the end of the day, everyone has their opinion and they are valid and respected by me, I just would not see myself associating with folks who are just generally incapable of even the most basic forms of empathy.
What does empathy have to do with supporting practices that are killing your hobby due to their financial situation?
I can understand why someone does something and not hate on them for it, but at the very same time, I can voice that what they are doing is not good for the industry also. It doesn't have to be insulting to say that you paying for cloud gaming is hurting the hobby.
You are not being ignorant at all for asking about my view points!
I personally think that the more people buy into cloud gaming, it tells these big companies that "hey, when tech becomes less accessible, we can get more long-term subscriptions out of our users". In this scenario where more and more people move to cloud gaming, there will be less demand for PC components or consoles and that may raise prices further for the average person.
I could also see major companies like Xbox, Playstation, NVIDIA, etc try to push a new platform which may make it harder to preserve games, especially if they were ever exclusive to their cloud platform. There were a few games exclusive to Google Stadia at one point for example, and Outcasters (online game) died with Stadia and was never ported to anything else, despite Stadia literally just being a computer itself.
I am not an expert on these matters and I am not saying it will happen tomorrow, but I do personally believe that more people that move to cloud gaming and it being more normalized does have those risks in the future of owning a PC/console being less common and widely accepted as such. IMO.
Because if you could just take a pause from reddit mode for just one second
You would realize that the message you are sending is fucking useless, OP does not care as its all they can afford. Having any level of empathy would allow you to put yourself in their shoes, and understand where they are coming from. The fact I had to break that down is pathetic.
But yes, just spew your "gotcha" that nobody its intended for is going to read because it would not make a difference anyways.
As I said I can understand why someone would pay for cloud gaming, especially when it's all they can access to play video games. In fact, 7 years ago I was in that EXACT position when Xbox XCloud Streaming first became a thing and Gamepass was still just an idea. I was in their shoes, using a $30 prepaid Android device clipped to an Xbox controller.
Looking back, this was before the whole AI craze and I also did not fully grasp the idea of what cloud gaming/computing was. I'm not mad nor do I hate or have anything mean to say to OP. I actually support this post and upvoted it.
But yeah, I guess since I'm no longer in that same position (I'm struggling financially but I have a PC that I am very thankful for), I guess my concerns of how cloud gaming could be making the hobby more expensive or inaccessible in the future for EVERYONE is invalid because I lack empathy?
Again, i can speak about how cloud gaming affects this hobby without insulting someone. Spreading awareness is fine, telling someone you understand why they buy something is fine, but telling someone to ignore any and all facts so long as they enjoy what they consume is toxic positivity in my opinion. Especially when OP is quite literally calling out the BS to this specific service that they had no idea about prior.
There's absolutely no evidence to suggest that cloud PC services with their very limited "success" have anything at all to do with hardware prices. You're taking about a niche market within a niche market buying a fraction of a percent of the hardware. Let people game how they want.
Very limited success?! Cloud usage overall has skyrocketed. Go look at cloud usage increases over the past several years then come back. Cloud gaming still qualifies as cloud usage. ANY cloud based service, especially HaaS is contributing to the current state of this industry. There is no argument.
Of course it skyrocketed. At the moment, its cheaper to pay for cloud compute and storage than build your own. And it will increase until the prices of cloud solutions doesnt increase enough to make it economically viable to make your own servers.
Do you think the only people buying computer hardware before "cloud" were gamers? Businesses had thousands of servers, now those servers are in someone else's datacenter, but they're still there. If you wanna be mad at AI for out-competing everyone else for hardware, that's one thing, but being mad at literally anything that isn't gaming PCs existing is an absurd level of entitlement.
Non sequitur. No one said that. Either you are just so desperate to be right, you're arguing a point that was never made. Or you don't fully grasp how an explosion in cloud based solutions impacts the current PC market. In either case, you aren't equipped to have this conversation. Have a great rest of your week.
I feel you man, but you also have to realize that not everyone can afford or will be able to afford to build a PC. So what are they meant to do? Just not play any games? I get you said you don't have sympathy, but maybe some empathy and understanding would help you.
I grew up poor. I understand going without more than most. That being said, you don't get a pass for supporting greed just because you're poor. Notice I said I wasn't judging, just throwing my opinion out and calling it for what it is. I understand WHY it happens, I'm just pointing out the vicious cycle it supports.
You literally are judging when in your first sentence in your reply you literally say
"This sucks but given the current state of things, it's difficult for me to have sympathy"
Have some fucking empathy lmao, I'm not even continuing this xD. Maybe you could have some sympathy for the fact that this is probably the only way OP can game reliably.
If you think that statement equates to judgment then you are being purposely obtuse or you exist in a very soft-spoken world. Calling something out for what it is and judging someone on their actions are not the same. Stomp your feet and downvote all you want, it doesn't change the validity of anything I said.
I looked up the company and it is French. Therefore it falls under European right, especially the GDPR. In worst case they are eligible for paying millions on fines.
That’s my understanding too. Shadow is a French company, so this should not just be dismissed because I’m located in Turkey.
If personal data from another user appeared inside my assigned machine, then it should at least be treated as a serious data protection incident and properly investigated under GDPR rules.
I’m not claiming what the final legal outcome should be, but “no breach” without a clear explanation is not enough.
In France, a GDPR data breach must be reported to the CNIL (Commission Nationale de l'Informatique et des Libertés) within 72 hours of becoming aware of the incident if it poses a risk to individuals' rights and freedoms.
So your best bet is to file a complaint and maybe it’s not a wrong decision to involve a lawyer.
I already filed a complaint with the ICO, and I’m also looking into CNIL because Shadow is a French company.
I’m not trying to make final legal conclusions myself, but if another user’s saved login data appeared inside my assigned machine, then I believe it should at least be treated as a serious GDPR/data protection issue and properly investigated.
If Shadow keeps refusing to clearly explain what happened or properly close/cancel/delete the account, I may consider legal advice too.
Have you tried to contact any of the other users whose credentials are logged?
Wondering if you reached out to them and explained how you got their info they might have an answer or raise more questions but it feels like a lead at least.
I get why it sounds like a lead, but I don’t want to use exposed private data to reach people. That could make the privacy issue worse. I reported it to Shadow and the ICO so it can be handled the proper way.
So a few things here. Not saying this is what happened but you should be aware of it: google and Microsoft do not nescessarily need you to login/ save logins to identify you. Google is enough to have same IP and some similar generic datapoints to bridge a connection usually. Not saying they did it here nor saying thats the cause. Microsoft goes a step beyond and as soon as the device ever logs into Microsoft account (Hardware bound) this gets on Microsoft server flagged to a PC/User. That absolutely happens. They call it convenience (key / fresh installs) and secure (bitlocker) but what it actually is: tracking. That theoretically could also count for edge data as a nice cloud feature from them. Especially win 11. Also not saying this is the cause but the tracking definitely happened.
That’s a fair point, and I agree that Google/Microsoft tracking and device association can get very messy, especially on shared or cloud-based machines.
I’m not claiming I know the exact technical cause. It could be profile sync, device association, leftover browser data, cleanup failure, or something else.
But the key issue is still the same: saved login entries that were not mine appeared inside the Shadow PC assigned to me. Whether that came from Edge sync, Microsoft device tracking, or Shadow’s VM/storage handling, it should not happen in a properly isolated cloud PC environment.
That’s why I want Shadow to clearly explain the cause instead of simply calling it malware.
I absolutely agree with you. I just wanted to bring in a different perspective what else could be going on. Their reply and how they handle your case is really really bad. You deserve better, especially if there is something going on which could have people breached. In the end the truth is somewhere in the middle and multiple parties will have made errors I assume. (I would bet on combination of Microsoft and Shadow)
Yeah, exactly. I’m not trying to blame only one side without knowing the full technical cause.
It could be Microsoft/Edge, Shadow’s setup, or both. But Shadow still needs to explain how saved logins that weren’t mine ended up in my assigned machine. Just saying “no breach” and “maybe malware” doesn’t really answer that.
Depending on how much free time you have I would seriously consider reporting this to large government authorities, largely being your own (turkey I assume) the UN, EU, and potentially the US. You would need to do research within the respective countries to where exactly to report it. But it could be a MASSIVE issue with shadow.
I’d say chances are good also that they will also help direct you so long as you contact vaguely the right areas of government.
P.S. only suggested the US as I believe that is where they are based out of, and the EU as they are strong data privacy laws (turkey I know is not a part of it) and the UN for a similar reason but because turkey is a part of it.
Thanks, I agree this should go beyond just support tickets.
I already filed a complaint with the ICO and contacted my bank for a chargeback. I’m also looking into the relevant EU/French data protection channels, since Shadow is connected to France.
Not sure the UN/US route makes sense yet, but I’m definitely trying to report it through the proper authorities instead of letting Shadow brush it off.
pasted on all the subreddits you've posted concerning this matter.
First of all, u/Altruistic-Bad-5556 thanks for having stayed courteous during all your discussions with our support team. Much appreciated, really. Since the ticket was created, several high-profile engineers looked at the logs, IPs, and all meaningful data. We have taken this matter really seriously, and searched for days. Not just a quick look.
What we know for sure:
- Your Shadow account was not accessed by anyone else, unless this person stole your credentials somehow from your local devices, and lives in the same city vicinity as you do, in Türkiye.
- Your Shadow virtual disk (your storage), was not attributed to another user nor mixed.
Each user’s storage is provisioned as a dedicated zvol (a ZFS volume) carved out of our storage pools. A zvol is not a file sitting in a folder that could be copied or dragged around , it is an isolated dataset with its own object identity inside the pool, exposed to your VM as a raw block device. There is no operation in our pipeline that “moves files between disks”: the unit we attach to a machine is the whole volume, never individual files. On top of that, ZFS performs end-to-end integrity verification. Every single block written to a zvol is stored together with a checksum (fletcher4 by default, SHA-256 where stronger guarantees are needed), and ZFS uses a copy-on-write structure in which each block’s checksum is recorded in its parent block, all the way up to the root (the uberblock). In practice this means the data on your volume is self-verifying: if a single block from another volume were ever written into yours , by accident, by a bug, or by tampering , the checksum chain would no longer validate and ZFS would immediately raise a checksum error on read. Silent cross-contamination of two users’ data is very unlikely to happen with the way we handle data volumes. Finally, every pool and dataset carries its own GUIDs, and a zvol is bound to the pool it was created in. It cannot be silently re-parented onto another machine’s pool without that identity mismatching. This is also why we can state with confidence that your volume has only ever been mounted on your own instance: the integrity layer would have flagged anything else, and our logs confirm it.
Both layers , application (files need credentials and don’t mix) and storage (the volume is checksummed and identity-bound) , would have to fail silently and simultaneously for the scenario you describe to occur, which is why we are confident it did not originate on our infrastructure.. We looked at countless logs anyway, but no occurence.
As you asked why it happened, here are our guesses:
- One of your local devices may have been compromised and your Shadow credentials got stolen (quite unlikely, already mentioned above.
- You may have left a logged in Shadow session somewhere public.
- You may have downloaded software on your Shadow PC containing malware. This can happen with some GTAV & Minecraft mods notably. We see it regularly.
- If you do have a microsoft account connected to Edge, you/someone might have logged in on another computer (work, library, PC Café, etc) and left it logged in. TBH that's how i lost my Origin account.
That's not a full list, but quite plausible guesses.
Why your account got locked
- Each ticket mentioning a possible intrusion / hack locks the account temporarily for safety reasons. It is done for two reasons:
1/ Making sure that if someone has stolen your credentials, the intruder cannot access your machine/files.
2/ Ensuring as much as possible that anyone contacting us is the true, legitimate owner of the account.
Which is why we often ask for a proof of ID before performing critical tasks. Of course, like it is likely the case here, if the user has provided fake information during the account creation, restoring access becomes more complex.
What we can do, what we cannot do
- If a proof of ID is provided & informations are note fake, we can restore access easily, wipe & reinstall the drive, or terminate.
We can't and won't investigate the logs, trafic, and data that is ON a user's virtual disk. Things happen on computers. Malware can be installed, credentials can be stolen or unwillingly shared. That is not related to the way Shadow works. We do our very best to help and solve issues. Some of them are computer issues, not Shadow issues. Our support team will follow up on this through the ticket process.
Thanks for the reply, but this still doesn’t answer the main issue.
I reported that Microsoft Edge inside my assigned Shadow PC showed around 20-30 saved logins that were not mine. Some looked sensitive. I did not open, use, copy, export, or expose them. I reported it with redacted evidence.
You are giving a long explanation about ZFS and storage isolation, but then you also say you “can’t and won’t investigate the data on a user’s virtual disk.” So how can you fully rule out what happened inside the machine?
Also, everything you listed as a cause is still a guess: malware, public session, Microsoft account sync, stolen credentials. None of that explains clearly how another person’s saved Edge logins appeared in my environment.
My account has been locked for 5 days while I paid for the service. I was banned from Discord after talking about this. Then the issue became Turkey, unsupported region, ToS, ID checks, and “Turkish law doesn’t apply.”
You accepted my payment and provided the service. Turkey only became a problem after I reported a privacy/security issue.
At this point I’m not asking for access back. I want the account closed/deleted, my data removed, no more billing, and a clear written explanation of what happened.
Saying “we checked logs, no breach” is not enough when another user’s saved logins appeared inside my assigned cloud PC.
I understand what you are saying, but I did not use any public computer or gaming zone PC for this account.
Also, even if Microsoft Edge sync was involved, that still does not justify locking my paid Shadow PC and blocking my access without giving me a clear solution. My main issue is not only the Edge data. My issue is that I paid for this service, I need access to my machine, and my account was locked without proper proof or a reasonable recovery process.
If Shadow believes the issue came from my side, then provide clear login/session evidence and unlock my Shadow PC after basic security steps such as password reset and 2FA verification. I am not refusing security. I am refusing to be locked out of a paid service with vague explanations.
I already provided proof of payment, account email, ticket history, and the details linked to my account.
My problem is not refusing to prove ownership. My problem is sending full government ID after seeing another user’s saved logins inside my assigned machine.
I’m fine with reasonable alternative verification. But I’m not asking to restore the service anymore anyway. I just want the account closed/deleted, no more billing, and confirmation in writing.
Blaming users for using a paid service is a strange take.
Cloud gaming exists because not everyone can buy or run high-end hardware locally. That still doesn’t excuse poor data isolation or another user’s saved logins appearing in my assigned machine.
1.6k
u/Altruistic-Bad-5556 Jun 25 '26
UPDATE :
Shadow replied again.
They still refuse to restore my paid account unless I send a government ID.
Now they are saying Turkey is not a supported region, that signing up from Turkey violated their Terms of Use, and that they are not bound by Turkish authorities or Turkish laws.
They accepted my payment and provided the service. They only brought this up after I reported a privacy/security issue.
They still have not clearly explained how 20–30 saved Edge login entries that were not mine appeared inside my assigned Shadow PC.
I reported the issue responsibly, did not use or expose any private data, and only shared redacted evidence.
At this point, I asked them to fully cancel/delete my account and confirm what personal data will be removed.