Reference
Every Cloakpaste setting with its default, what is stored where, and which browser permissions it uses.
Settings
| Setting | Where | Default |
|---|---|---|
| On or off everywhere | Switch at the top of the menu | On |
| Protection for this site | Switch in the menu, or Sites in settings | On for built-in sites |
| Kinds of data | What to hide | All on except Organisation |
| Find names and addresses with the on-device model | Detection | On |
| Also hide random-looking strings | Detection | Off |
| Always hide | Settings | Empty |
| Never hide | Settings | Empty |
| Reply handling | Replies | Highlight, show originals on hover |
| Restore originals when copying | Replies | On |
Open the settings from the menu with Settings and playground.
The menu
| Item | What it does |
|---|---|
| Site name and status | Whether pastes on this site are checked. |
| Protect this site | Shown on sites that are not protected. Adds the site. |
| Hidden on this site | Placeholders in this site's vault, with Show, Copy and Forget. |
| Forget all for this site | Clears the site's vault. |
| Settings and playground | Opens the settings page. |
Placeholders
Placeholders look like [KIND_N]: the kind, then a number counting up per kind on each site, for example [EMAIL_1], [EMAIL_2], [API_KEY_1]. The kinds are listed in What Cloakpaste detects.
The paste notice
| Element | Meaning |
|---|---|
| Checking paste for private data… | Shown while a longer check runs. |
| Hid … items before pasting | What was hidden, with counts by kind. |
| Details / Hide details | Shows or hides each placeholder with a partly masked original. |
| Paste original | Replaces the redacted text with what you copied. |
| Paste held back | The paste could not be checked, so it was not pasted. Paste anyway pastes the original. |
The notice closes by itself after 8 seconds, and stays open while the pointer is over it.
Storage
| What | Where | How long |
|---|---|---|
| Placeholder vault (placeholders and originals), per site | Browser session storage, in memory | Until the browser closes, or until you forget it |
| Hidden-item counts for the toolbar badge | Session storage | Until the browser closes |
| Settings and your lists | Local extension storage | Until you change them or remove the extension |
Cloakpaste makes no network requests. The model and all code ship inside the extension.
Permissions
| Permission | Why |
|---|---|
| Access to the built-in chat sites | To catch pastes and mark placeholders there. |
storage | Settings and the session-only vault. |
offscreen (Chrome) | Runs the model in a hidden extension page. In Firefox the model runs in the background page. |
scripting and optional site access | Only when you choose Protect this site, for that one site. |