These terms cover your use of the Cloak website, documentation, and the protocol's reference software. The underlying protocol is open-source and non-custodial — we don't hold your funds and we can't undo your transactions.
01What Cloak is
Cloak is a non-custodial privacy protocol that issues Visa cards through a licensed BIN sponsor and settles through a shielded on-chain pool. Cloak Labs ("we") publishes the protocol specification, reference implementations, and this website. We do not operate the pool — it is a Solana program. We do not hold your funds at any point.
02Eligibility
- You must be at least 18 years old, or the age of majority in your jurisdiction, whichever is older.
- You must not be on any sanctions list (OFAC, EU, UK HM Treasury) or reside in a sanctioned jurisdiction. The BIN sponsor performs sanctions screening at authorization time.
- Use of the card program is subject to the BIN sponsor's cardholder agreement, which you accept separately when a card is provisioned.
03Self-custody and responsibility
You are solely responsible for your wallet, seed phrase, and device security. We have no ability to recover keys, reverse transactions, or unfreeze accounts. Specifically:
- If you lose your seed, the balance is gone. Permanently.
- If your device is compromised, the attacker can spend your balance and we cannot stop them.
- Transactions are final once the Solana program has committed them. There is no chargeback path on-chain. (Merchant chargebacks are governed by Visa network rules and the BIN sponsor's dispute process.)
04Acceptable use
You agree not to use Cloak to:
- Violate sanctions or export control regimes applicable to you.
- Fund or facilitate terrorism, human trafficking, or child exploitation material.
- Circumvent the card network's rules or merchant-category prohibitions.
- Attempt to attack, probe, or destabilize the protocol outside of our published bug bounty program.
Good-faith security research is welcome and protected. See /security for the responsible disclosure policy and bounty program.
05Fees
Fees are documented on the public pricing page and in the technical docs at /docs#fees. In summary:
- Protocol fee: 0.30% of card-mint value
- Relayer fee: market-set, typically 0.04% + ~1,000 lamports
- Network fees: standard Solana base fee
- Card-side FX: Visa rate + 1.0% on non-USD merchants
Fee changes are announced 14 days in advance.
06Warranty disclaimer
The software and services are provided "as is" without warranty of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, and non-infringement. Cryptographic protocols may contain undiscovered vulnerabilities; you acknowledge this risk.
07Limitation of liability
To the maximum extent permitted by law, Cloak Labs and its contributors are not liable for any indirect, incidental, special, consequential, or punitive damages, or loss of profits, data, or use, arising out of or related to your use of the protocol or this website. Our total cumulative liability for any claim shall not exceed one hundred United States dollars (USD $100).
08Intellectual property
- Circuits, Solana program, and TypeScript SDK are released under the MIT License.
- The Rust relayer reference implementation is released under the AGPL-3.0 License.
- The Cloak wordmark and cube logo are trademarks of Cloak Labs. Use in satire, news reporting, and protocol integration (e.g. "Powered by Cloak") is permitted. Rebranded forks of the software must remove the wordmark.
09Governing law
These terms are governed by the laws of the Cayman Islands, without regard to conflict-of-law rules. Any dispute shall be resolved by binding arbitration under the rules of the LCIA, seat of Cayman Islands, language English.
10Changes
Material changes to these terms are announced 14 days in advance on the site and at github.com/cloakfi/legal. Continued use after the effective date constitutes acceptance.