뒤로 가기

Know Exactly What We See

Two very different products, two very different security models — here's exactly what each one can and can't see

Code Claimer (Extension)

Your Shuffle session never leaves your browser. The claim goes straight from your machine to Shuffle:

Your browser shuffle.com

Not through us. We never receive your password, your session cookie, or your auth token — we hold no credential to your account, so there is nothing on our side to leak or misuse.

All our server ever receives:

  • Your Shuffle username, when connecting
  • The code and the result after a claim
Check it yourself: open DevTools → Network while a code drops. The claim request goes to shuffle.com, not to us.

This isn't something you have to take our word for — the traffic is right there in your own browser, every single time a code drops. No hidden requests, no background calls to any server of ours.

API & Virtual Claimer (Server-side)

Different by nature: it claims 24/7 without a browser open, so it needs a Shuffle access token that you generate and hand us. Here's exactly how that's handled:

  • The token is used only to redeem codes on your account
  • Stored solely to run claims — never shared or sold
  • You stay in control: reset your Shuffle token any time to revoke access instantly
  • Claims run over rotating proxies so activity looks natural
  • Your session and membership data stays secured on our own servers, in our own datacenters and cloud infrastructure, using end-to-end encryption
A Shuffle access token is sensitive — treat it like a key. Only enable the API & Virtual Claimer if you're comfortable with server-side redemption, and rotate the token whenever you want to cut it off.

We take that trust seriously: even our own team connects to the servers holding your token over VPN, with continuously rotated configurations, so nobody outside your control can act on your behalf.

코드 획득을 시작할 준비가 되셨나요?

코드 드롭을 놓치지 않는 수백 명의 사용자와 함께하세요

Telegram에서 시작하기 사이트 로그인

즉시 활성화 · 24/7 지원 · 안전한 결제