CloakMe ("we", "us", "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights over it. By using our service, you agree to the collection and use of information as described here.
When you register, we collect your email address, username, and a hashed (bcrypt) password. We never store plain-text passwords.
For each redirect processed through CloakMe, we collect and store the following data points:
| Data Point | Purpose | Retention |
|---|---|---|
| IP address (visitor) | Filter evaluation, geo-targeting, analytics | 90 days |
| Country code | Geo-filter, analytics dashboard | 90 days |
| User-Agent string | Device/browser/OS detection, bot filtering | 90 days |
| Referrer URL | Email scanner detection, filter evaluation | Not stored after evaluation |
| Action taken (offer/white) | Analytics, click counting | 90 days |
| Timestamp | Analytics, monthly quota tracking | 90 days |
Payments are processed exclusively by NOWPayments. We do not store credit card numbers or bank details. We store only payment status, plan name, cryptocurrency type, and the NOWPayments transaction ID for your records.
We collect standard server logs including HTTP request method, response code, and timestamp. These logs are used for debugging and security purposes and are retained for 30 days.
We use the following third-party services that may process data on our behalf:
We do not sell, rent, or share your personal data with any other third parties for marketing purposes.
We implement reasonable technical measures to protect your data, including bcrypt password hashing, httpOnly JWT cookies, and HMAC-verified webhooks. However, no system is completely secure and we cannot guarantee absolute security.
Click data is retained for 90 days and then automatically purged. Account data is retained for the life of your account plus 30 days after deletion. You may request deletion of your account and associated data at any time via our contact page.
Depending on your jurisdiction, you may have the right to:
To exercise these rights, please contact us.
We use a single httpOnly session cookie (access_token) to keep you logged in. We do not use tracking cookies or third-party advertising cookies. A refresh token cookie (refresh_token) is also set for automatic session renewal.
CloakMe is not directed at children under 16. We do not knowingly collect information from children. If you believe a child has created an account, please contact us for removal.
We may update this Privacy Policy periodically. We will notify registered users of material changes by email. The "Last updated" date at the top of this page reflects the most recent revision.
Privacy questions or data requests? Contact us here.