Short version: Cloak Check collects nothing at all. Every check runs locally in your browser, there is no server, and no data about your browsing is transmitted anywhere. The only personal data we ever hold in connection with the extension is what you choose to give us if you send a report through the support page, and we use that solely to reply to you.
1. Who we are
Cloak Check is a free, open-source browser extension we publish on the Chrome Web Store. It scans the page you're currently looking at for cyber security signals (HTTPS use, lookalike domain tricks, missing security headers, phishing patterns, and so on) and shows you a traffic-light verdict in plain English.
Cloak is a cyber safety education brand for teenagers. It's a product of Solid Code Solutions Ltd, an IT consultancy based in Leamington Spa, UK. For the purposes of UK GDPR and the Data Protection Act 2018, the data controller for anything covered by this policy is:
- Solid Code Solutions Ltd
- Registered address: 20 - 22 Wenlock Road, London, England, N1 7GU
- Company number: 08750436
- ICO registration: ZC141966
- Privacy contact: info@solidcodesolutions.co.uk
This policy covers the Cloak Check extension itself and the support form on this site. Visiting the pages on getcloak.tech — including this one — is covered by the website privacy policy, which explains the standard server logs our host keeps and the fonts the pages load.
The extension is built around one promise: nothing about your browsing leaves your browser.
2. What the extension reads
To produce a verdict for the page you're on, the extension reads:
- The page's URL and the response headers Chrome received when loading it
- The page's HTML, the scripts it references, and any iframes embedded in it
- Cookie attributes (the Secure flag and similar metadata) for the current page — never the cookie values themselves
- The page's favicon URL
This inspection happens locally inside your browser. The extension does not record what you read, what you type, what you click, or which pages you visit over time.
3. What the extension stores
Scan results are written to chrome.storage.session, a per-session RAM-only area provided by Chrome that is wiped automatically when you close the browser. The extension does not use chrome.storage.local, IndexedDB, or any other persistent storage, and writes nothing about your browsing to disk.
4. What the extension transmits
Nothing. The extension makes no network requests to our servers or to anyone else's, because there is no server. Cloak Check has no backend, no telemetry, no analytics, no error reporting, no remote configuration, and no update channel beyond the Chrome Web Store's standard distribution. The source ships unminified, so any of this can be verified by inspecting the unpacked extension.
5. Permissions, in plain English
Chrome asks you to approve the following permissions when you install the extension. Each one is used for the specific purpose described below and nothing else:
- activeTab — lets the popup talk to the page currently in focus when you click the icon.
- storage — used only for the RAM-only chrome.storage.session area described above.
- webRequest — read-only access to the response headers (CSP, X-Frame-Options, HSTS, and so on) of pages as they load. The extension never blocks, redirects, or modifies any request.
- cookies — read-only inspection of cookie attributes (Secure flag, SameSite, and so on) on the current page. Cookie values are not read.
- webNavigation — lets the extension re-run its checks automatically when a tab finishes loading, so the verdict is ready by the time you click.
- host_permissions: <all_urls> — required so the above can happen on whichever page you're visiting. The permission is broad by necessity but the use is narrow: read-only inspection, with no transmission of data anywhere.
6. Children and the extension
Because the extension transmits no data of any kind, it does not collect personal information from anyone, including under-18s. Nothing about the analysis or the storage changes based on who's using it. A parent or guardian who wants to verify the extension's behaviour can inspect the source or contact us at the address in section 10.
7. The support form
If you report a bug, a wrong verdict, or a feature request through the Cloak Check support page, we collect what you type into the form: your name and email address, the issue type, and — if you choose to give them — the page URL where it happened, your extension and browser versions, and your description of what went wrong.
- Why we use it — to reply to you and to reproduce and fix the issue. Our lawful basis is legitimate interest: you've asked us about a problem, and replying is the obvious thing to do.
- Who processes it — the form is handled by Netlify, which hosts this site, and our replies go through our email provider, Microsoft 365. We don't sell your data and we don't share it with anyone else, except where we're legally required to.
- How long we keep it — up to 2 years for reference, then deleted, unless there's a reason to keep it longer (for example, an issue that's still open).
- Under 18? — you can send a report, and we treat it exactly the same. Please don't put anyone else's personal details in the description, and if you'd rather, ask a parent, carer or teacher to send it for you.
8. Your rights
For anything we hold about you from a support report, you have the right to ask for a copy of it, to have it corrected or deleted, and to object to our using it. Email us using the address in section 10 and we'll act within one month. If you're unhappy with how we've handled your data you can complain to the Information Commissioner's Office, though we'd rather you gave us the chance to put it right first.
The extension itself holds nothing about you, so there is nothing to request, correct or delete — uninstalling it removes the only thing it has, which is the current session's scan results in RAM.
9. If this ever changes
If a future version of the extension changes any of the above — for example, if we were ever to add an opt-in feature that transmitted data — we would update this policy first, update the Chrome Web Store listing, and ask for explicit consent within the extension before any new data flow began. Any change is reflected in the "last updated" date at the top of this page.
10. Contact us
For anything privacy-related — data requests, questions, complaints, or concerns about a young person's data — get in touch:
- Email: info@solidcodesolutions.co.uk
- Post: Solid Code Solutions Ltd, 20 - 22 Wenlock Road, London, England, N1 7GU
Bugs, wrong verdicts, or anything else about how the extension behaves go to the Cloak Check support page.
← Back to Cloak Check