The file enters
Drop a PDF, Word doc, spreadsheet or web page. It's read entirely in your browser — the bytes are never uploaded.
A file goes in one side, its format is rebuilt inside a sealed chamber on your device, and the result comes out the other — PDF, Word, Markdown, HTML, spreadsheets and data. The plain conversions never touch the network. When AI is needed, a cloaked copy of the text is relayed — every identifier the engine detects replaced by a surrogate first. A receipt proves what left.
On-device · 0-egress receipts · runs on CloakAPI
Drop a file into the airlock
or browse — PDF, Word, Markdown, HTML, text, CSV, TSV, JSON, Excel · up to 15 MB
Most "free converter" sites upload your file to their server. cloak-convert doesn't have one for your content: deterministic conversions run in your browser and egress 0 bytes. The meter above is live — cross-check it against your own Network panel.
Read the privacy model →Drop a PDF, Word doc, spreadsheet or web page. It's read entirely in your browser — the bytes are never uploaded.
The format is rebuilt on your device. Emails, phone numbers, dates of birth, cards, IBANs, passports, national and company IDs, IP addresses, postcodes, places and person names — including uncommon and non-Latin-script names the on-device multilingual model finds — are detected and inventoried on the spot. For AI-assisted jobs each detected value is swapped to a surrogate before anything is relayed; if the name model cannot load, nothing is sent.
Download the converted file, plus a signed receipt showing exactly what — if anything — ever left the tab.
These all run deterministically in the browser — free, offline, 0-egress. Layout-aware and summarising conversions add an AI step that relays a cloaked copy of the document text, with every detected identifier replaced by a surrogate.