Aug 2025 · ChatGPT
About 4,500 shared chats turned up in Google search — résumés, names, personal confessions. OpenAI pulled the feature and called it "a short-lived experiment."
TechCrunch →A desk tool for confidential work
Decide what leaves your computer — before it leaves.
Cloak Melon swaps the sensitive details out of a document before you paste it into any AI tool — and puts them back after. Nothing leaves your computer. Watch:
From: Dan Whitfield[[PERSON_1]] <dan.whitfield@northgate-eng.com[[EMAIL_1]]>
To: Priya Raman[[PERSON_2]] <priya@northgate-eng.com[[EMAIL_2]]>
Subject: Re: Contract dispute — Meridian[[COMPANY_1]] account
Priya[[PERSON_2]],
Quick summary before the call. Meridian[[COMPANY_1]]'s PO 44-2091 is short
by $18,400. Their AP contact is Sam Oduya[[PERSON_3]], 415-555-0142[[PHONE_1]].
Invoice date 2026-06-30[[DATE_1]]. Card on file 4539 1488 0343 6467[[ID_1]].
Dan[[PERSON_1]]
An illustration of the swap. In the app, nothing is
cloaked until you've reviewed and approved every item — and when the answer
comes back, your real details return exactly, with a warning if any
stand-in didn't come home.
Get the launch email
Not released yet. Leave an address and we'll tell you the day it is.
This keeps happening
People's AI chats keep turning up where they never expected them. The past year alone:
Aug 2025 · Grok
Around 370,000 shared conversations were indexed by Google. Nothing warned users that could happen. At least one chat held a password.
Forbes →Jun 2025 · Meta AI
The app's Share button posted people's chats to a public feed — medical questions and private confessions, next to their real profiles.
Malwarebytes →Jul 2026 · Claude
Shared chats and documents surfaced in Google search — among them a patient's medical report and schoolchildren's names and phone numbers.
Axios →Not one of these was a break-in. Every time, a share
link did exactly what share links do — with someone's real text inside. You
can't control what happens to text after it leaves your computer. You can
control what's in it when it goes. If the names never left your desk, what
leaks is [[PERSON_1]] — and
[[PERSON_1]] is nobody.
Keep the meaning. Hide the identity.
A blank tag keeps a secret but starves the AI of context. Context cloak is the middle setting — try changing the handling below and watch what you'd paste change:
What you wrote
My client Marisol, the CFO at Adelvine Pharma, freezes up in board meetings whenever the Adelvine CV-2 numbers are bad.
What you'd paste
That's the app's review screen in miniature — you set the
handling item by item, and you can dial any one of them broader or narrower. When the
answer comes home, [[CARDIAC_DEVICE_1]] turns back into
Adelvine CV-2, everywhere it appears.
How it works
- 1Add a document. Word, PDF, email, spreadsheet, slides — or paste text.
- 2Review what it found. Nothing is cloaked until you say so.
- 3Copy the cloaked version.
The key that matches
[[PERSON_1]]to the real name stays here. - 4Take it to any AI or translator yourself. The app never connects to anything.
- 5Paste the answer back. Real details return — with a warning if any stand-in didn't come home.
You are the air gap. It prepares the text; you decide what happens next. That's exactly why nothing can leave without you.
Three ways people use it
Working with AI
Coaches, therapists, HR — anyone whose documents are full of other people's lives. Cloak, paste into the AI you already use, restore the answer.
Translating
Compact tags built to survive translation tools. Send the cloaked source through the translator you trust; restore your real details into the translated text.
Sharing with another person
Send the situation, not the identities — a consultant or mentor sees the full shape of the problem, and who it's about never leaves your desk.
The honest version
We'd rather under-promise.
- ✓Keeps your documents on this computer — nothing is uploaded, ever.
- ✓Finds likely sensitive details; you decide what to hide.
- ✓Puts your real details back afterward — and warns you if any don't return cleanly.
- ✓Proves it: a one-click offline test tries to send data out and shows you every attempt blocked, live, on your own machine. Run it any day, Wi-Fi off for the strongest version.
- ✕Doesn't lock or encrypt your files — "cloaked" means hidden behind stand-ins, not scrambled with a password.
- ✕Can't promise it catches everything, and won't call a document "anonymous," "compliant," or "secure" — the final check is always yours.
- ✕Doesn't protect the computer itself — it's not antivirus or disk encryption. For those, use what's already free on your machine (BitLocker on Windows, FileVault on Mac).
- ✕Your key — the list matching each stand-in to your real detail — is an ordinary readable file. It has to be: that's how your details come back. Keep its folder as private as the document itself.
Be there when it opens
Cloak Melon isn't released yet. Leave an email address and we'll write when there's something real to tell you: when the first group gets in, and the day it's ready to download. Nothing else — no countdown, no drip sequence, no "just checking in."
We ask for one thing: an email address. Not your name, not your company, not what you do for work. That's the same rule the app follows — collect the least that does the job.
Show me the sign-up box
Nothing on this page talks to anyone until you press that button — the sign-up box comes from our email service, and it only loads when you ask for it.
Where it goes: your address is stored with beehiiv, the service that sends our email, and it's used to email you about Cloak Melon. You can leave the list from the link at the bottom of anything we send. We don't sell it, rent it, or pass it on.