Privacy at CloakPic
Privacy Policy
Last updated: 21 September 2026
This policy explains what information CloakPic handles, why it is used, and the choices available to you when you use the service.
01Information we collect
Account information, including your name, email address, password hash, language and appearance preferences, verification status, and account timestamps.
Security and operational records, including session identifiers, one-way email and IP fingerprints used for rate limiting, sign-in activity, and administrator audit or notification records.
For the no-account demo, CloakPic stores the uploaded image and any saved masked export in private storage for up to 30 days. You can delete the demo image sooner from the editor.
Service records may include a one-way IP fingerprint, approximate country when supplied by trusted hosting infrastructure, browser family, operating system, device class, screen dimensions, browser language, time zone, referring domain, and service events such as uploads, saves, and downloads.
If you choose Google sign-in, we receive the provider account identifier, verified email address, and profile name needed to create or link your account.
02How we use information
We use this information to create and secure accounts, store and process images, provide masking and export tools, enforce limits, prevent abuse, recover accounts, and maintain the service.
CloakPic does not sell personal information. Images are not used for advertising, profiling, or AI model training.
03How image processing works
Supported JPEG, PNG, and WebP files are decoded and re-encoded on the server to remove source metadata.
Automatic face detection runs in your browser using locally hosted software. Your images are not sent to a third-party cloud AI service for face detection. Detection can miss faces, so you must review every result before sharing it.
04Storage, access, and sharing
No-account demo images are automatically deleted after 30 days. Anonymous service records are retained for up to 90 days. Service records linked to registered accounts are retained for up to 12 months unless a longer period is needed for security, payment, legal, or dispute purposes.
Registered images remain in private account storage until you delete them or close the account, subject to the deletion schedule described below. Payment and accounting records may be retained for the period required by applicable law.
We may use infrastructure, email, or identity providers to deliver the service. They receive only the information required for the relevant function. We may also disclose information when required by law or to protect users, the service, or others.
05Cookies and similar technology
CloakPic uses a strictly necessary session cookie to keep you signed in, protect forms, and remember your current session. Language and appearance preferences may be stored with your session or account. We do not use third-party advertising cookies.
06Deletion
When you request deletion using the available controls, access to the selected image or account is removed from your account immediately.
07Your choices and rights
You can review your account information, delete individual images, or request account deletion from the account controls. Depending on the law that applies to you, you may also have rights to access, correct, export, restrict, object to, or request deletion of personal information.
For privacy requests that are not available through the account controls, contact the CloakPic operator using the support details provided with the service. We may need to verify your identity before completing a request.
08Security
We use technical and organizational safeguards designed to protect information, including access controls, encrypted transport in production, password hashing, request protection, and private file storage. No online service can guarantee absolute security.
09Children’s privacy
CloakPic is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided information without appropriate permission, contact the service operator so it can be reviewed and removed.
10Changes and contact
We may update this policy as the service changes. The updated date at the top of this page shows the latest revision. Material changes may also be communicated in the service.
Questions about this policy or CloakPic’s privacy practices should be sent to the CloakPic operator through the support contact supplied with your deployment or account access.