route twitter through tor. your bank through direct. netflix through your VPN. per rule, per domain, no system-wide config. youtube skipper and ad blocking included.
no subscription no telemetry no phone-home $8 once
set rules: twitter.com → tor, yourbank.com → direct, netflix.com → vpn. active the moment you load the page. no system-wide config, no app restart.
auto-skip sponsored segments, intros, and "subscribe" reminders. no API key, no logged-in account, no breaking playback. 144p through 4K.
easylist + easyprivacy filters baked in. stop fingerprinting scripts, kill analytics, block ads. faster page loads, less data burned.
route any site through your local tor daemon (socks5 :9050) or any socks5/https proxy. per-domain. no tor browser bundle required.
unlimited proxy profiles, unlimited url patterns, unlimited blocklists. free version caps you at 2 profiles and 5 patterns.
$8 in bitcoin, paid once. lifetime. license key is a signed jwt stored locally — read it, back it up, move it between browsers. no account needed.
no restart, no config file, no terminal (well, no extra terminal).
route social media and news through tor, keep banking on a direct connection.
// /sc/routes.json { "rules": [ { "pattern": "*twitter.com*", "proxy": "tor" }, { "pattern": "*facebook.com*", "proxy": "tor" }, { "pattern": "*chase.com*", "proxy": "direct" }, { "pattern": "*netflix.com*", "proxy": "vpn-us" } ] }
add a custom socks5 proxy. per-domain. hot-swap profiles from the toolbar.
youtube stops showing you the same ad six times. page loads feel instant. that's it.
every line in this table is something we explicitly chose not to do.
| behavior | what it means |
|---|---|
| no phone-home | no analytics, no telemetry, no usage pings. your routes stay on your disk. |
| no account required | buy with bitcoin. get a license key. use it. no email required after purchase. |
| no auto-renewal | $8 is $8. forever. not a trial, not a "first year." lifetime. |
| no bundled crapware | no "recommended partners," no "sponsored routes," no affiliate redirects. |
| no feature tiers | one plan. everything. no "pro," no "enterprise." |
no subscription. no "free trial then $9.99 a month." $8 in bitcoin, paid once.
license key delivered in <30 seconds. funds settle on-chain.
mv3 build. download the .zip and load it via chrome://extensions → developer mode → load unpacked.
direct .xpi and .zip downloads with sha256 checksums.
WebRTC is a browser feature that can bypass your proxy and leak your real IP. ShadowCore disables it for privacy.
It's built into every modern browser for services like Google Meet, Discord, and Google Hangouts. The problem: WebRTC can discover your real local and public IP addresses — even when you're connected through a proxy or VPN.
// Without WebRTC protection: "WebRTC peer connection established" { "localIP": "192.168.1.42", // your home network IP "publicIP": "154.161.149.37" // your real ISP IP (LEAKED) } // A malicious site can read this even though you're "on Tor"
When you use a SOCKS5 or HTTP proxy, all your browser traffic should go through that proxy. WebRTC was designed for real-time communication, so it makes its own peer-to-peer connections outside the proxy. This means a website can use JavaScript to create a WebRTC connection and read your real IP — even when you think you're anonymous.
ShadowCore configures Chrome/Firefox's privacy.network.webRTCIPHandlingPolicy setting to disable_non_proxied_udp. This forces WebRTC to send all media traffic through your proxy (or block it if no proxy is configured). No media can leak your real IP.
// ShadowCore sets this on every browser start: chrome.privacy.network.webRTCIPHandlingPolicy.set({ value: "disable_non_proxied_udp" }); // Result: WebRTC media can only travel over your proxy // Your real IP stays hidden.
Video and audio calling sites (Google Meet, Discord in-browser, etc.) may not work properly when WebRTC is locked down. They might fall back to audio-only or require you to use the desktop app. For most people using a privacy extension, this is the right trade-off. For people who need WebRTC video calls daily, you can temporarily disable the protection in the popup settings.
ublock origin is great and free — keep using it. shadowcore does things ubo doesn't (per-site proxy routing, tor integration) and needs a maintenance model that doesn't rely on grants or ads. $8 once funds the btcpay node, the domain, and the time to keep shipping updates. if you can't pay, email us.
no. the extension makes zero outbound requests except: (1) license activation (one-time), and (2) blocklist refresh (opt-in). all settings and license keys are stored locally.
your license key is a signed jwt — it works offline forever. the extension keeps working. you can extract your key from browser.storage.local and back it up. the license server code is documented well enough that self-hosting is a 10-minute job.
firefox for android and kiwi browser (android, chrome-based) both support the same extension api. ios safari is locked down by apple — no extension can change routing there.
email us within 7 days. we'll refund. lightning payments can't be reversed technically, but we'll send equivalent usd or btc from our treasury. no questions, no friction.