Privacy Policy

Last updated 14 July 2026

The short version: Sunda Cloak does its work entirely on your own device. Your files are never uploaded, never seen by us, and never seen by anyone else. We collect no analytics and no tracking data. That's the whole point of the product.

1. Your documents

When you cloak a document, everything happens locally on your device. Your document is never sent over the internet, never stored on a server, and never logged. We have no way to see, recover, or analyze the files you protect. When you're done, the working copy is simply gone.

2. What stays on your device

Sunda Cloak keeps a small amount of information on your own device so the app can work — for example, your trial status and your settings. None of this is ever sent to us. There are no cookies and no third-party trackers.

3. The only times we connect to a server

The extension only ever contacts a server in two narrow cases, and neither one ever includes your documents. The first is when you choose to activate or check a paid subscription. In that case it makes a single secure request to api.lemonsqueezy.com — LemonSqueezy, our payments provider and merchant of record, which has its own privacy policy.

That request contains only what's needed to confirm your subscription:

your license key (the key emailed to you when you subscribed) and an instance identifier that ties the license to this installation; and
nothing else — it never includes your document content, your file names, or any usage data.

LemonSqueezy's reply includes your own customer email address. The extension stores that only on your device, to show your subscription status, and never re-transmits it.

The second case is the built-in personal-details feature — it finds things like names, phone numbers, and account numbers in your documents so they can be protected too. To do its best work it uses an AI model that runs on your own device, and the extension downloads that model once, automatically in the background — there is no switch to flip and no button to click. The download is roughly 800 MB and comes from Hugging Face (huggingface.co and its *.hf.co download hosts), a public model-hosting service with its own privacy policy. It happens only on computers that can actually run the model (those with WebGPU support) and only while you have an active trial or subscription. That connection fetches only the model files — a fixed, pinned version — and is used for the download and nothing else: no document content, no file names, and no usage data are ever sent — the model comes down to your device and nothing about you goes up. The model is stored locally and the feature works fully offline from then on. Until the download finishes — and on computers that can't run the model — your documents are still protected by Sunda's always-on baseline protection, entirely offline.

Those are the only two connections the extension ever makes, and neither one ever carries anything from your documents.

Our data-use commitments. In line with the Chrome Web Store's Limited Use requirements:

We do not sell or transfer user data to third parties outside the approved use cases described above.
We do not use or transfer user data for purposes unrelated to the extension's single purpose (cloaking documents you choose, on your own device).
We do not use or transfer user data to determine creditworthiness or for lending purposes.

4. On-device AI

On supported computers, Sunda can use on-device AI to make protection smarter. This runs locally on your device — your document content is not sent to us, to Google, or to anyone else.

The same is true of the built-in personal-details detector described above: once its model is downloaded, everything it does happens on your device. The model files stay cached locally, what the detector finds in your documents never leaves your computer, and — like everything else in Sunda Cloak — it serves the extension's single purpose: cloaking documents you choose, on your own device.

The detector never changes or removes anything you wrote — your real details stay exactly as they are in the document. It only hides them from AI readers by surrounding them with hidden decoys. It raises the cost of AI tools reading your personal details; it is not a complete defense.

5. This website

This site is built to match the product's promise. It is static, loads its own fonts, and makes no third-party requests. There is no Google Analytics, no advertising pixels, no cookies, and no cross-site tracking.

This website does not collect any personal information. There are no sign-up forms, no newsletter, and no contact form — visiting the site sends us nothing about you.

6. Children

Sunda Cloak is not directed at children under 13, and we do not knowingly collect their data.

7. Changes

If this policy changes, we'll update the date above.

8. Contact

Questions about your privacy? Email us at sundacloakai@gmail.com.