Agreement and eligibility
These Terms apply when you visit Cloak websites, create a numbered account, or use Drive, Object, sharing, support, or related services. If you do not agree, do not create or use an account. If you act for an organization, you confirm that you can bind it.
You must be at least 13 and legally able to enter this agreement where you live. A minor must have permission from a parent or legal guardian. Sanctions or local law may prevent Cloak from providing service in some locations, but Cloak will not demand KYC or source-of-funds documents as a condition of use or refund.
Operator and governing terms
These Terms and any non-contractual dispute arising from the Cloak service are governed by the laws of Belize, without regard to conflict-of-law rules. This section will name Cloak's registered operating entity, address, and service-of-process details once formation is complete; until then, direct legal process and notices to [email protected].
The courts of Belize have exclusive jurisdiction, except where mandatory consumer law gives you the right to bring a claim in another court—for example, if you live somewhere with mandatory consumer-protection law, such as the EU or UK, that law may let you bring a claim in your own country's courts despite this clause. Checkout displays the complete price, billing interval, renewal, cancellation, refund, tax, and service-limit terms before payment. If checkout conflicts with this page, the term more favorable to the customer controls unless law requires otherwise.
Numbered accounts
Cloak generates a random account number without requiring a name, email address, phone number, profile, identity document, or password. The account number controls access, so keep it secret and saved offline. You are responsible for activity authorized with it unless you promptly report a service-side compromise.
Cloak cannot recover a lost number through identity verification. We will never ask for KYC, a selfie, government identification, or source-of-funds documents to restore, use, refund, or close an account.
Your data and permission to operate
You keep ownership of data you upload. You give Cloak a limited, worldwide, non-exclusive permission to host, transmit, encrypt, replicate, back up, display to authorized recipients, and delete it only as needed to provide features you request, secure the service, and comply with valid law. This permission ends when the data is deleted from active systems, subject to backup expiry and legal preservation.
You confirm that you have the rights needed to store and share the data. Sharing gives recipients their own ability to keep a copy; revoking a link cannot delete copies they already obtained.
Encryption and recovery
Private Drive encrypts content and names on your device; Cloak cannot decrypt them without customer-controlled key material. Object accepts plaintext at the S3 gateway unless you encrypt it before upload. The Security page describes these boundaries and is incorporated into these Terms.
Encryption does not replace backups. Maintain an independent copy, test restores, protect devices and keys, and do not rely on Cloak for the only copy of irreplaceable data.
Acceptable use
Follow the Abuse policy, which is incorporated into these Terms and defines the notice, review, and appeal process referenced under Suspension and termination. Do not use Cloak for unlawful content, exploitation of minors, malware, phishing, fraud, rights infringement, non-consensual intimate imagery, credible threats, unauthorized access, denial of service, spam, limit evasion, or interference with Cloak or another system.
Security research that follows the Security page's safe-harbor conditions is permitted. Ordinary S3 automation is permitted for approved Object accounts; abusive account creation or automation designed to evade controls is not.
Plans, payment, and renewal
The Pricing page and checkout state the storage allowance, billing interval, amount, currency, renewal behavior, usage charges, minimums, taxes, and limits. Fixed crypto plans may be prepaid for 1 to 12 months and require a new invoice to renew; Cloak does not auto-debit a wallet. You retain access through the paid period.
If a paid period expires, Cloak stops storage changes and provides the retention period shown in the dashboard to renew or export data before deletion. We do not convert a failed payment into permission to demand identity documents.
Refunds
You may cancel a direct plan at any time. If no storage or transfer was used during the current paid period, the payment for that period is refundable in full. If the service was used, only the unused prepaid value is refundable. For a fixed plan, that means the value of the time remaining in the billing period. For a usage-based plan, that means the unspent balance after accrued storage, transfer, and other metered charges. Service already delivered, third-party store charges, and payment-network fees are not refundable. Duplicate charges, billing errors, and rights required by applicable law remain refundable.
Refunds never require KYC, identity documents, a selfie, or source-of-funds disclosure. Prove control with the account number and a receipt, transaction hash, or payment token. Crypto refunds return the paid asset in the refundable amount, less an unavoidable network fee shown before the refund is sent; they are not converted at a later exchange rate.
Suspension and termination
Cloak may restrict only what is reasonably necessary when there is credible evidence of a policy violation, security threat, fraudulent payment, legal duty, service attack, or immediate risk of harm. Except in urgent cases, we give notice, the reason, a chance to fix the issue, and an appeal route before termination.
Cloak does not reserve the right to terminate paid access at any time for any reason at its sole discretion. If Cloak ends a compliant paid account for its convenience, it will provide a reasonable export window and refund unused prepaid service. No refund is owed for consumed usage, a valid chargeback, or the portion directly tied to proven fraud where law allows that result.
Account closure and deletion
You may cancel payment without immediately deleting the account, or request account deletion separately. Before deletion becomes final, the dashboard must state the export window, trash and version behavior, active-system deletion target, and backup expiry. Once encryption keys and active content are deleted, recovery may be impossible.
Service changes and discontinuation
Cloak may improve features, change limits, or retire a service. A material reduction to a paid feature or privacy protection receives reasonable advance notice unless an urgent security or legal issue makes delay unsafe. Price increases apply to future billing periods only.
If Cloak discontinues a paid storage service, it will provide a practical export period and refund unused prepaid service. Request-only features use the service commitments disclosed when access is approved.
If Cloak ceases operating entirely, we will announce it on the Cloak website and dashboard as far in advance as circumstances allow, provide a practical export window before deleting active content, and refund unused prepaid service to the extent Cloak's remaining assets and legal obligations permit. Because accounts are identity-free, Cloak cannot notify you directly—check the website or dashboard if a wind-down is announced.
Availability and warranties
Cloak aims to provide a secure and reliable service but does not promise uninterrupted operation, error-free software, permanent compatibility, or that stored data can never be lost. To the extent law permits, the service is provided as available and implied warranties are disclaimed. Consumer warranties that cannot legally be disclaimed remain in force.
Liability
Nothing excludes liability that law does not allow us to exclude, including liability for fraud, willful misconduct, or death or personal injury caused by negligence where applicable. To the extent Belize law permits, Cloak is not liable for indirect, incidental, special, consequential, or punitive damages, loss of profits, or loss caused by a failure to keep an independent backup.
For all other claims arising from the service, Cloak's total liability is limited to the greater of the amount you paid Cloak during the 12 months before the event giving rise to the claim or US $100. Mandatory consumer rights and remedies that cannot be limited remain unaffected.
Changes and contact
Material changes are dated and summarized. They apply prospectively after reasonable notice, except urgent security or legal changes. If a change materially reduces a paid customer's rights, the customer may cancel before it takes effect and receive any refund required by these Terms or law.
Questions about these Terms go to [email protected]. Support, privacy, security, and abuse reports should use the dedicated addresses on the Contact page. Every @cloak.uno address, including [email protected], is hosted by a third-party provider that can read plaintext message content—encrypt anything sensitive with the public key at cloak.uno/pgp.txt before sending, as described on the Contact and Security pages.