Transparency, security, and compliance
We believe trust is our only asset. That is why this page describes what we actually run and actually do — not an aspiration. Where something is planned rather than in place, we say so.
🔒 Security & Infrastructure
Our Security Posture
- EU-Based Hosting: Our services are hosted in European Union data centers
- Data Minimization: We collect only the minimum data necessary to operate the service — see our Privacy Policy for exactly what that means
- Encryption in Transit: Connections to our services are encrypted with TLS
Why EU Hosting Matters
No law requires us to keep your connection or browsing data — the EU's highest court has repeatedly struck down blanket data-retention mandates, and the GDPR requires us to minimize and delete. We are an EU company on EU infrastructure, outside the reach of extraterritorial access laws like the US CLOUD Act. Data that was never kept cannot be handed over later: a legal order can only reach forward, never backward.
Technical Architecture
- Browser Extension + EU Gateway: CloakID is a browser extension paired with a secure processing gateway hosted in the EU. The extension presents websites with a common, consistent persona; the gateway processes page content to support those protections
- Explicit, Per-Site Protection: Protection applies on supported sites; on unsupported sites the extension tells you so instead of pretending
- Visible Protection State: The extension shows the real protection status of the page you are on
📋 Legal & Compliance
Privacy Policy
Our commitment to data minimization and user control by default. Read our full Privacy Policy.
- Data is Toxic Waste: We collect only the minimum data necessary for service operation
- Opt-In Consent: Any non-essential data processing requires explicit user consent
- Transparent Practices: Clear disclosure of all data handling processes
Terms of Service
Clear, fair terms that protect both users and our service. Read our Terms of Service.
GDPR
We operate under the European data protection framework (GDPR), with EU-hosted infrastructure and data minimization as an engineering principle.
🛡️ Trust & Transparency
Honest Protection Claims
We tell you what is protected and what is not. CloakID does not mask your IP address, is not a VPN, and does not guarantee protection on unsupported sites — the extension shows its real state instead.
Security Review
We have engaged an independent security firm at the scoping stage; a full third-party audit has not yet been performed, and we won't claim otherwise.
Warrant Canary
Our transparency statement about government requests: Warrant Canary.
Responsible Disclosure
We welcome reports from security researchers. Contact us at security@cloakid.net.
📊 Service Status
Current Phase
CloakID is in a private design-partner pilot — a small, invited group using the product in daily browsing. We are validating reliability and usefulness in real use before any wider release; we do not publish uptime or performance guarantees at this stage.
Honest Trade-offs
First visits to new sites can take a moment longer while content is processed, and some pages may render imperfectly under protection. We say so, because that is the truth of how it works today.
Our Trust Commitments
Radical Transparency
We make our practices and policies publicly available, and we label what is planned versus what is in place. No hidden practices, no inflated claims.
User Control by Default
Every feature that could impact privacy requires explicit opt-in consent. We never assume what users want - we ask.
Honesty About Limits
No tool makes you untraceable, and we won't claim otherwise. We describe what each feature does and does not protect.
Continuous Improvement
We actively seek feedback from security researchers, users, and compliance experts to strengthen our security posture.
Questions About Trust & Security?
We’re committed to transparency. If you have questions about our security practices, compliance status, or want to report a security concern, please reach out.
Additional Resources
- Public Roadmap - What we are building now and exploring next
- Strategic Vision - Our strategic direction
- Warrant Canary - Transparency statement on government requests