Privacy

This page is how HostCloak handles operator data today. We do not claim PCI, SOC 2, or any other certification. The product name in use is HostCloak on hostcloak.com.

What we collect

• Waitlist / account email. The address you send to join the list, and later the email on an operator account.
• Scan targets. The DNS name or IP you name, plus the fact that you asserted authorization.
• Reports. Public-surface metadata of those hosts (port reachability, certificate fields, HTTP headers and well-known path presence, DNS records when relevant) and the posture grade / fix order we produce.
• Live Deck (later, opt-in). CPU, memory, disk, and net counters from an agent you install. Metrics only. Not a remote shell.

What we do not store

No root passwords stored. We do not request a root password, sudo password, or SSH private key. Do not paste them into waitlist mail, tickets, or report comments. Account login, when it exists, is yours — it is never used against a customer machine.

Billing

Stripe later. There is no live checkout today. When billing exists we expect to keep Stripe customer and subscription identifiers — not card numbers in our own database, and not Stripe secret keys in git.

What we do not claim

This is not a PCI assessment, not SOC 2, and not an audit letter. A HostCloak grade is a defensive posture snapshot for operators, not a certification you can show a bank or an auditor.

Contact

Questions: 48e2c64d4df7414b8e8ef31a4a412625@domainsbyproxy.com. To ask that a waitlist email be removed, write to the same address. Related: Terms, AUP, Abuse.