u/Altruistic-Bad-5556

I know this is not directly about piracy, but I think people here care about privacy and not blindly trusting companies, so I wanted to share it.

I had a paid Shadow PC account. Inside the Shadow PC assigned to me, Microsoft Edge showed saved login entries that were not mine. Around 20-30 saved logins.

Some of them looked like serious/sensitive accounts connected to another user’s personal information. I won’t name the services or expose details, because that would make the privacy issue worse.

I did not open, test, copy, export, or use any of those accounts. I only took redacted screenshots and reported it to Shadow.

Shadow replied saying there was no breach, no data issue, and suggested it could be malware. Then they locked my paid account.

My account has now been locked for 5 days, even though I paid for the service.

After I reported the issue, they suddenly started saying Turkey is not a supported region, signing up from Turkey violated their Terms, and that Turkish authorities / Turkish law do not apply to them.

They had no problem accepting my payment and giving me the service. Turkey only became a problem after I reported a privacy/security issue.

I was also banned from their Discord after talking about this.

At this point I’m not asking to get access back. I just want the account closed/deleted, my data removed, no more billing, and a real explanation for how another user’s saved logins appeared inside my assigned cloud PC.

I’ve already posted this in other forums and Reddit communities, and people suggested sharing it with wider gaming communities too.

Please help make this visible if you think it matters. Share it, comment, crosspost it, or tag people/outlets who cover gaming, privacy, or tech issues.

Not asking anyone to harass them. I just think if a cloud PC can show one user another user’s saved logins, people should know about it.

I’m a paid Shadow PC customer.

After logging into the cloud PC assigned to my account, Microsoft Edge contained saved login entries that were not mine and appeared to belong to a UK-based user.

I did not use, copy, export, or publish the data. I reported it to Shadow support and only shared redacted evidence publicly because it contains another person’s private information.

My paid account was then locked. Shadow confirmed my proof of payment was approved, but they still require government ID before restoring access.

I’m not trying to make a legal conclusion myself. I just want to know whether this should be reported to a data protection authority, and if so, which one would be appropriate: ICO, CNIL, or another authority?

I also want to know whether I should request a written explanation from Shadow about what happened and how they handled the exposed data.

I’m a paid Shadow PC customer.

After logging into the cloud PC assigned to my account, I found saved Microsoft Edge login entries that were not mine and appeared to belong to another user.

I did not use, copy, export, or publish the data. I reported it to Shadow support and only shared redacted evidence publicly because it contains private information.

My paid account is now locked, and Shadow is asking for government ID before restoring access.

I’m not trying to make legal claims here. I just want to know the proper way to report this kind of privacy/security issue, and whether there are any precautions I should take with my own accounts after seeing this.