Privacy-first by design

Built to protect your links and your audience.

Kloak started with a simple belief: sharing a link shouldn't mean exposing where it leads or who clicks it. So we built cloaked, encrypted short links with real bot protection — privacy isn't a setting here, it's the foundation.

Privacy protection first

We collect only what's needed to run your links and analytics. We never sell your data, and you decide exactly which contact details appear on your public page. Your account is guarded with secure password hashing and session management.

AES-256 encrypted links

Every destination URL is encrypted at rest with AES-256-GCM — authenticated encryption that both hides the URL and detects tampering. The real destination is decrypted only on our servers at redirect time, so anyone reading the link text learns nothing about where it points.

Bot & scraper protection

Every redirect is screened by our bot filter. Known crawlers, scrapers, headless automation, and link-preview fetchers are served a no-index notice instead of your destination, are excluded from your click counts, and search engines are told never to index a cloaked code.

Encryption that stays invisible to bots

When you cloak a link, the destination is encrypted with AES-256-GCM and stored server-side. The code you share is a random, opaque identifier we resolve privately — it can't be reverse-engineered from the link itself. Crawlers and scrapers are detected at the redirect and shown a no-index notice instead of the destination, so they can't map your short codes to their real URLs in bulk.

Unguessable short codes

Codes are generated with a cryptographically secure random generator — not sequential IDs — so they can't be predicted or enumerated to discover other people's links.

Authenticated encryption

Destination URLs are sealed with AES-256-GCM. If stored data is ever tampered with, decryption fails closed and the link simply won't resolve.

You stay in control

Update, hide, or revoke any link at any time. A cloaked link only works while you allow it to, and revoked codes stop resolving instantly.

Share boldly. Stay protected.

Claim your Kloak and get a link-in-bio page with cloaked, encrypted short links in seconds.