Terms of Service

Cloak is a non-custodial privacy protocol that issues Visa cards through a licensed BIN sponsor and settles through a shielded on-chain pool. Cloak Labs ("we") publishes the protocol specification, reference implementations, and this website. We do not operate the pool — it is a Solana program. We do not hold your funds at any point.

• You must be at least 18 years old, or the age of majority in your jurisdiction, whichever is older.
• You must not be on any sanctions list (OFAC, EU, UK HM Treasury) or reside in a sanctioned jurisdiction. The BIN sponsor performs sanctions screening at authorization time.
• Use of the card program is subject to the BIN sponsor's cardholder agreement, which you accept separately when a card is provisioned.

You are solely responsible for your wallet, seed phrase, and device security. We have no ability to recover keys, reverse transactions, or unfreeze accounts. Specifically:

• If you lose your seed, the balance is gone. Permanently.
• If your device is compromised, the attacker can spend your balance and we cannot stop them.
• Transactions are final once the Solana program has committed them. There is no chargeback path on-chain. (Merchant chargebacks are governed by Visa network rules and the BIN sponsor's dispute process.)

You agree not to use Cloak to:

• Violate sanctions or export control regimes applicable to you.
• Fund or facilitate terrorism, human trafficking, or child exploitation material.
• Circumvent the card network's rules or merchant-category prohibitions.
• Attempt to attack, probe, or destabilize the protocol outside of our published bug bounty program.

Good-faith security research is welcome and protected. See /security for the responsible disclosure policy and bounty program.

Fees are documented on the public pricing page and in the technical docs at /docs#fees. In summary:

• Protocol fee: 0.30% of card-mint value
• Relayer fee: market-set, typically 0.04% + ~1,000 lamports
• Network fees: standard Solana base fee
• Card-side FX: Visa rate + 1.0% on non-USD merchants

Fee changes are announced 14 days in advance.

The software and services are provided "as is" without warranty of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, and non-infringement. Cryptographic protocols may contain undiscovered vulnerabilities; you acknowledge this risk.

To the maximum extent permitted by law, Cloak Labs and its contributors are not liable for any indirect, incidental, special, consequential, or punitive damages, or loss of profits, data, or use, arising out of or related to your use of the protocol or this website. Our total cumulative liability for any claim shall not exceed one hundred United States dollars (USD $100).

• Circuits, Solana program, and TypeScript SDK are released under the MIT License.
• The Rust relayer reference implementation is released under the AGPL-3.0 License.
• The Cloak wordmark and cube logo are trademarks of Cloak Labs. Use in satire, news reporting, and protocol integration (e.g. "Powered by Cloak") is permitted. Rebranded forks of the software must remove the wordmark.

These terms are governed by the laws of the Cayman Islands, without regard to conflict-of-law rules. Any dispute shall be resolved by binding arbitration under the rules of the LCIA, seat of Cayman Islands, language English.

Material changes to these terms are announced 14 days in advance on the site and at github.com/cloakfi/legal. Continued use after the effective date constitutes acceptance.