Privacy policy

Local sanitation

When you select Warp text, Cloak reads text from the clipboard, removes eligible invisible Unicode characters locally, and writes the result back to the clipboard. The text is not retained and does not leave the device.

Optional model rewriting

Model rewriting is off by default. If you enable it and select Rewrite with model, Cloak sends the following directly from your browser to the endpoint you configured:

• The clipboard text you asked it to rewrite.
• The rewrite instructions and selected style.
• Derived voice guidance, including short excerpts only when you explicitly opted to retain them.
• The provider credential required to authenticate the request.

Cloak requests access only to the configured endpoint when you first use it. It does not proxy the request through a Cloak service. A connection test sends only a fixed test prompt, not clipboard text or a voice profile.

Data sent to Anthropic, OpenRouter, OpenAI-compatible services, Ollama, or another endpoint you configure is governed by that service's terms and privacy policy. Review those terms before enabling rewriting.

Data stored in Chrome

Cloak uses chrome.storage.local to retain:

• Extension settings.
• A provider API key, if you enter one.
• Derived voice profiles you save.

Chrome's extension storage is local to the browser profile but is not encrypted by Cloak. Anyone with access to the computer account or Chrome profile files may be able to read it. Use a limited key and remove or revoke it on a shared device.

Full writing samples used to build a voice profile are analysed in the options page and then discarded. Derived observations are saved. Short source excerpts are saved and later sent with rewrite requests only when you enable the optional excerpt checkbox; that checkbox is off by default and the resulting prompt is shown before use.

You can clear a stored key in settings, delete individual voice profiles, or remove all extension data by uninstalling Cloak.

Data use and sharing

The Cloak developer does not receive, sell, rent, or use clipboard text, API keys, voice profiles, or browsing activity. Cloak uses data only to perform the user-requested transformation. It does not use data for advertising, credit, lending, or purposes unrelated to its single purpose.

Chrome Web Store Limited Use

Cloak's use of information received from Google APIs, including Chrome extension APIs, will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

That information is used only to provide Cloak's single purpose: transforming clipboard text after an explicit user action. Cloak transfers it only to a model endpoint the user selects when optional rewriting is requested, as described above. It is not used or transferred for advertising, unrelated profiling, creditworthiness, or lending. The Cloak developer does not receive the data or permit anyone acting on its behalf to read it.

Changes and contact

Material changes to this policy will be published here with an updated effective date. Questions can be sent through the support contact shown on Cloak's Chrome Web Store listing.