Data handling
- Raw IP addresses are removed from stored report JSON.
- Shared reports expire after seven days by default.
- A daily salted visitor hash may be stored for basic abuse controls.
- External IP intelligence is optional and only runs when provider keys are configured.
Allowed use
Use this project to test systems you own, operate, or are authorized to assess. Do not use it for credential attacks, unauthorized account activity, fraud, or unauthorized data collection.
Third-party boundaries
This project does not host, redistribute, embed, resell, or operate any third-party browser binary for customers. Cloak Browser provides observable environment checks and report tooling for systems you are authorized to test.