CloakliPrivacy Policy
Summary
Cloakli draws visual masks over parts of web pages before you share your screen. Your masks and settings live in your browser. Cloakli has no accounts and no analytics. The only network communication the extension makes is with our license server, and only for verifying a Pro license.
1. Data stored locally in your browser
The following is stored with Chrome's local extension storage on your device and is not sent anywhere by itself:
- Mask rules: the CSS selector used to find the element again, the site hostname, the scope (element / page type / site), an optional page pattern (URL path), a structural fingerprint (tag/class/position and hashed link identifiers — never the text itself), and a random rule ID
- Per-site pause state
- Onboarding completion state
- A random installation ID (generated with a random UUID; it contains no personal information)
- If you activate Pro: a license session token, the last 4 characters of your license key (for display), and a cached license status
The actual text, names, emails, images, or any other content of the pages you mask is not stored.
This website itself stores one value in your browser's localStorage: your language preference ("en" or "ko"). No cookies, no analytics.
2. Data sent to our license server
Only if you activate or verify a Pro license, the extension contacts our license server (a Cloudflare Worker at cloakli-license.mycloakli.workers.dev) and sends:
- Your license key (once, during activation — the server stores only a SHA-256 hash of it)
- The random installation ID
- The license session token (for re-verification)
- The extension version
The server keeps request timestamps and limited technical records used for abuse prevention (rate limiting) and error handling. As with any internet service, your IP address is processed by the network infrastructure (Cloudflare) that delivers the request; we do not use it to identify you.
3. Data that is never sent
- Web page text or HTML
- Email contents, video titles, channel names
- Passwords or form input
- Screenshots or the content of images
- The actual text you masked
- Your browsing history
Cloakli contains no analytics, telemetry, or advertising trackers, and the release build is automatically checked to ensure the only outbound network call is to the license server.
4. Third-party services
| Service | Role |
|---|---|
| Chrome Web Store (Google) | Distributes and updates the extension. Google's own policies apply to the store. |
| Cloudflare | Hosts the license server (Workers/D1) and this website (Pages). |
| Lemon Squeezy | Merchant of record. Handles checkout, payment, invoices, license key issuing, and subscription management. Your payment card details are entered on and processed by Lemon Squeezy — Cloakli's servers never receive or store card details. |
5. Data retention
- Local data: delete individual masks in the extension's "Manage saved masks" page, or remove all local data by uninstalling the extension.
- License records on the server store only hashes (license key hash, session token hash, installation ID hash) — never the originals.
- Retention targets: deactivated device records and webhook processing metadata are kept up to 90 days; rate-limit records up to 30 days; active license records are kept while the license is in use and for the period needed for support and legal obligations.
6. Your choices
- Delete any or all saved masks at any time in the extension
- Deactivate your license on a device ("Deactivate on this device")
- Cancel your subscription via Lemon Squeezy (see the refund policy)
- Contact us for privacy questions or deletion requests: cloakli.support@gmail.com
7. Children
Cloakli is a general-purpose productivity tool and is not directed at children under 13. We do not knowingly collect personal information from children.
8. Changes
If this policy changes, we will update the "Last updated" date above. Material changes will be noted on this page.