Data Policy

Purpose limitation

Cloak handles information only for disclosed product, billing, activation, support, security, reliability, legal, and business-record purposes. Browser activity processed by the extension is limited to delivering or improving its user-facing functionality.

Data minimization

We aim to request only the browser permissions and information reasonably necessary for the current feature set. New data collection or broader permissions should have a documented product purpose and an appropriate user disclosure before release.

Local processing

Where practical, extension analysis, settings, proof records, supported purchase observations, and per-store automatic-forgetting choices are processed or stored locally in the browser. Local processing reduces transfer but does not make data risk-free; anyone with access to the device or synchronized browser profile may be able to access local state.

Extension data and service data

Protection receipts, supported purchase observations, and browser activity used to produce those local features are designed to remain in the extension. Cloak's website, checkout, activation, support, attribution, security, and subscription systems necessarily process limited service data as described in the Privacy Policy. Cloak does not describe the overall business as zero-server or zero-data.

Cloak operates at the browser application layer. It does not mask network routing or IP addresses, control ISP or carrier records, alter raw hardware identifiers that websites do not expose to extensions, remove third-party account history, or govern data collected inside native applications or on third-party servers.

Restricted uses and transfers

Cloak does not use or transfer extension user data for personalized advertising, data brokerage, surveillance unrelated to product functionality, or eligibility decisions involving credit, employment, housing, insurance, or lending. We do not permit humans to read extension-derived page content except with affirmative user consent for support, where required for security, or as required by law.

Vendors

Service providers receive only the information reasonably needed to perform payment, hosting, communication, support, analytics, reliability, security, professional, or legal services. Vendor access should be limited by contract, system controls, and the provider's own legal obligations.

Retention and deletion

Information is retained according to purpose, risk, legal obligations, and operational need. Support and security records may remain while an issue is active and for a reasonable period afterward. Billing and transaction records may be retained for tax, accounting, fraud, dispute, and legal requirements. Verified deletion requests are honored where applicable and not subject to a lawful exception.

Security and incidents

Cloak uses access controls, secret management, payment-signature verification, transport protections, and other safeguards appropriate to the service. Suspected incidents are assessed for containment, remediation, documentation, and legally required notice.

Requests

Data questions, access requests, correction requests, deletion requests, and authorized-agent requests can be submitted through the Support form. We may verify identity and retain a limited record of the request and response.