cloakingx@guard:~

Last updated July 25, 2026

Privacy Policy

This policy explains what data Cloaking X collects — from accounts we host directly, and from the ad-traffic that passes through the streams our customers configure — how we use it, who else can see it, and how long we keep it.

Overview

Cloaking X is a real-time traffic-filtering service for digital advertisers. Using it involves two different kinds of data: information about your Cloaking X account, and information about the visitors who click the ads you route through a Cloaking X stream. This policy covers both, and is deliberately specific about which is which.

Who We Are

Cloaking X ("we", "us", "our") operates cloakingx.com and its dashboard. For anything in this policy — a question, a request, a complaint — contact us at sales@cloakingx.com.

Account Information We Collect

When you create a Cloaking X account, we collect:

  • Your name and email address.
  • Your password — stored as a bcrypt hash, never in plain text, and never visible to us in readable form.
  • Your plan, and the API key your integrations use to talk to our API.
  • If you pay by USDT, the wallet address you paid from, the transaction hash, and the amount — see Payment Data.
  • If you participate in our partner/agent program, your referral code, commission balance, and payout wallet address.
  • Any support tickets you open with us — the subject, message body, and reply thread you write to our team.

Traffic & Click Data We Collect

For every click that hits a stream a customer has configured, we log the following signals in order to make a real-time routing decision and to power that customer's Reports dashboard:

  • The visitor's IP address, and geographic data derived from it (country, city).
  • The visitor's ISP and ASN (network operator), and VPN / proxy / hosting / Tor / bot flags.
  • Abuse-reputation signals: recent-abuse and frequent-abuser flags, and an abuse-velocity rating.
  • A device/browser fingerprint built from up to 63 client-side signals — covering rendering characteristics, hardware, and interaction patterns — and a hash derived from it.
  • The visitor's user agent string, and the operating system, browser, and device type parsed from it.
  • Timezone and referrer URL.
  • The computed risk score for the click, and the point-by-point breakdown behind it.
  • The routing decision (money page or fallback page) and the reason, plus the outcome of the proof-of-work challenge where one ran.
  • Click identifiers present in the URL — Google's gclid, Meta's fbclid, TikTok's ttclid — and UTM parameters (source, medium, campaign, content, keyword).
  • The response time of the check itself.

This data describes a visitor to one of our customers' ad campaigns — not a Cloaking X account holder. We collect and retain it on behalf of, and to provide the filtering service to, the customer whose stream produced it.

How We Use This Data

  • To make the real-time routing decision every click requires.
  • To power the Reports and Analytics dashboards shown to the account that owns the stream.
  • To detect click-ID reuse, delayed ad-platform re-crawls, and other abuse patterns, as described in our About page.
  • To enforce plan limits — click volume and click-history retention.
  • To operate and secure the service: fraud prevention, abuse investigation, and debugging.
  • To send account-related email: usage-limit warnings, payment confirmations, renewal reminders, support replies, and team invites.

Third Parties We Share Data With

We don't sell any data. A limited set of processors handle specific parts of the service:

  • IPQualityScore, or ip-api.com as a fallback — receive a visitor's IP address to return reputation, connection-type, and VPN/proxy/Tor/abuse signals.
  • TronGrid (api.trongrid.io) — receives the TRC-20 wallet address a payment was sent from/to, to verify USDT transactions on the public TRON blockchain.
  • Resend — our transactional email provider; receives your account email address and name to deliver the emails described above.
  • MongoDB Atlas — our database host; stores all of the account and traffic data described in this policy.

We do not share a customer's visitor traffic data with any other customer, and we don't hand visitor data to the ad platforms our own detection logic is built to identify.

Cookies

Cloaking X sets a small number of first-party, functional cookies — no third-party advertising or analytics cookies. See our Cookie Policy for the full list.

Data Retention

  • Click logs are automatically deleted 180 days (6 months) after they're written — enforced by a database expiry index, not a manual process.
  • What's visible in your dashboard is a shorter window set by your plan (7 to 365 days depending on tier — see Pricing), which can be shorter than the 180-day database retention above.
  • Account records are kept for as long as the account is active. Contact sales@cloakingx.com to close your account and have your account record deleted.

Payment Data

We accept USDT (TRC-20) only. We do not collect or store card numbers, bank details, or any other traditional payment credential, and we do not operate a card processor. Payments are verified by querying the public TRON blockchain via TronGrid; the paying wallet address, transaction hash, and amount are recorded to confirm and reconcile each payment.

Security

Passwords are hashed with bcrypt and never stored in plain text. The site applies a standard set of security response headers (including a strict referrer policy and frame-ancestors protection) sitewide. No method of transmission or storage is perfectly secure, and we can't guarantee absolute security.

Your Choices

  • Review and update your account information from your dashboard's Settings page.
  • Contact sales@cloakingx.com to close your account, or to request early deletion of click logs generated by your own streams ahead of their automatic 180-day expiry.
  • Manage cookies through your browser — see our Cookie Policy for what that affects.

Children's Privacy

Cloaking X is a business tool built for advertisers and marketing teams. It is not directed at children, and we do not knowingly collect personal information from children.

Changes to This Policy

We may update this policy as the product changes. Any update is reflected by revising the "Last updated" date at the top of this page. Continued use of Cloaking X after a change takes effect constitutes acceptance of the revised policy.

Contact

Questions about this policy or your data: sales@cloakingx.com.