Privacy

Cloak Forge privacy: fully private when you want it to be

Cloak Forge runs AI entirely on your Mac. In Private Mode, nothing leaves through Cloak Forge: every leak check in our tests was blocked. The rest is up to you.

Last updated 6 October 2026

How it works

The Cloak Forge Launcher runs the AI model on your own Mac, using its own private copy of Ollama that ships with the app. There’s no cloud AI and no account to create, and nothing is sent anywhere by default. Web starts switched off every time you open the Launcher.

The AI engine is locked to your Mac. It has no internet access, and the Launcher only lets programs ask it to chat or write. It can’t download models, use cloud models or search the web on its own.

Private Mode

One switch for full isolation. With Private Mode on:

No internet. The assistant and the commands it runs can reach only the AI on your Mac. Even looking up a web address is blocked.
No opening other apps. Commands can’t hand work to a browser, another app or a script that would run outside these protections.
No clipboard. Commands can’t read or write the clipboard, because macOS can sync it to your other Apple devices.
No sync folders. Commands can write only inside your workspace folder. The default workspace doesn’t sync, and the app warns you if you pick one inside iCloud, Dropbox or Google Drive.
Nothing left behind. Nothing is logged, not even counts. Automations are paused, model downloads are off, and the app’s own data folder gets no new files. Temporary files are deleted after each command. Anything you choose to save in your workspace stays there for you.
Always visible. A Private badge in the title bar, with your Mac’s online or offline status next to it.

Tested. We ran a fixed set of leak checks on the signed, notarized app: internet requests, web-address lookups, opening apps and files, model downloads, cloud-model requests, writes to sync and startup folders, and a scheduled automation. Every one was blocked, and local chat still worked.

Offline is the strongest setting. An option allows Private Mode only while your Mac is offline. With no internet connection, nothing on your Mac can reach the internet, from Cloak Forge or anything else.

You’re in control

Outside Private Mode, privacy depends on what you connect the AI to. Each of these reaches out only when you turn it on, and shares only what’s listed here.

Web search (Web on): your search queries go to the search provider, Tavily. While Web is on, commands the assistant runs also get normal internet access.
Cloak Forge Email: the AI that reads and drafts runs only on the Launcher’s private local AI. Your mail goes through your email provider (Gmail, for example), which sees the emails you send, as it already does.
Model downloads (Web on, confirmed each time): Ollama’s model library sees your IP address and which model you download. Downloads are off in Private Mode.

Outside the app

Like all Mac software, Cloak Forge runs on macOS, and macOS checks app certificates with Apple. Cloak Forge also can’t control other software on your Mac. Private Mode covers everything Cloak Forge does; using it on an offline Mac keeps everything else off the internet too.

Automations

Web off: automation commands run with the same protections as the assistant: no internet, no opening other apps, no writing to sync or startup folders. Email steps are skipped.
Private Mode: automations are paused completely.
Web on: automations run the steps you set up, with normal internet access. Commands can reach the web and email steps send through your email provider. They do what you set them up to do, and nothing else is added.

Web counts as on only while the Launcher is open. If it’s closed, scheduled automations run as if Web is off.

Logs

The Launcher’s run records hold counts and outcomes only: the time, whether the run worked, numbers such as files seen or emails sent, and which step failed. No email text, subjects, addresses, file names or command output. Only your Mac user account can read them, and they’re deleted after 30 days. In Private Mode, nothing is logged at all.

Cloak Forge Email keeps the same kind of record for auto-sends: the time and how many replies were sent, skipped or failed, deleted after 30 days. So it never auto-replies to the same person twice in a day, it keeps a scrambled fingerprint of each address it replied to, made with a key that never leaves your Mac, and deletes it after 24 hours.

Known limits

Built on a feature Apple has deprecated. The protections use macOS’s sandbox tool. It works on current macOS, but a future release could change or remove it. We’ve designed a second, independent layer as a backup; it isn’t shipped yet.
A list of blocked services. Some protections block specific macOS services that can hand work to another app. A macOS update could add a new one that isn’t on the list yet.
Web on turns protections off, on purpose. Searches go to Tavily and commands get normal internet.
Model downloads show your IP address and the model’s name to Ollama’s library.
Email automations don’t send while Web is off. When they do send, email goes through your email provider.
macOS contacts Apple to check app certificates.
Some programs don’t work in Private Mode. Commands keep temporary files in a folder inside your workspace, deleted after each command. Programs that insist on macOS’s own temporary folder (some Apple tools, for example) fail.
“Online” is cautious. Your Mac counts as online whenever it has a network route beyond your local network. On Wi-Fi without working internet it still shows online, so the offline-only option errs on the strict side.
Your workspace is open to the assistant. It can write anything in the folder you pick. The default, ~/Cloak Forge Workspace, is a dedicated folder that doesn’t sync.
Files your own commands write are yours to manage. If an automation command you wrote saves to a file of yours, the app doesn’t apply its privacy settings or 30-day deletion to it.

This website

This is a small site for a small business. We use Cloudflare Web Analytics to count visits, see which pages are read, and learn roughly where visitors come from (for example a search engine, and which country). It uses no cookies, does not follow you across other sites, and does not identify you personally. There are no tracking pixels and no advertising. Beyond that, we collect only what you deliberately send us, and we use it only to reply.

The booking form

The form on the contact section does not send anything to a server. When you press Request a call, your browser prepares an email in your own mail application containing the name, email address, service, and message you typed. Nothing leaves your device until you choose to send that email to us. Once you send it, we hold that message the way we hold any other email — to respond and to follow up on the work.

If you email us directly

We keep the correspondence so we can carry the conversation forward and deliver the service. We do not sell it, rent it, or share it with anyone outside Cloak Forge, except where we are legally required to.

Fonts and hosting

Every font and script is served from this site. Pages make no requests to anyone else: no font services, no script CDNs.
The site is hosted on GitHub Pages. GitHub may log request metadata (IP address, user-agent, timestamp) under its own privacy practices.

The mail-in SSD service

If you use the drive-processing service, we work on your data on an air-gapped machine, return the drive, and retain no copies once the results are delivered and you have confirmed receipt. The specifics are written into the engagement agreement before any drive is shipped.

Your choices

You can ask us what correspondence we hold from you, and ask us to delete it, by emailing jonsagent8@gmail.com. Since we store nothing beyond email threads, this is usually a quick request to honour.

Changes

If this policy changes, the date above changes with it. Material changes will be noted at the top of this page for a reasonable period.

← Back to what we offer