Cloaked vs Bitdefender

Cloaked is a privacy-masking service with a strong mission, an 'encrypted even from us' architecture claim, and explicit commitments to never sell data, read emails, read texts, or listen to calls — but significant product complexity means multiple features are governed by third-party policies rather than Cloaked's own: the VPN is powered by PureVPN (and PureVPN's policy governs it), financial account connections use Plaid/Stripe/PayPal under their own policies, and the Inbox Cleaner requires Gmail access despite the high-profile 'never read your emails' pledge; additionally, it is a US company governed by Massachusetts law, no security certifications are named, data retention is vague, and it ignores Do Not Track signals.

Bitdefender is a Romanian cybersecurity company — EU member state jurisdiction, GDPR enforced by the Romanian DPA — with ISO 27001 and SOC2 Type 2 certifications, an explicit no-data-selling commitment, an anonymisation-first principle for technical data, and no advertising partner data sharing; the main caveats are that individual data processors are not named in the policy, technical security data can be retained for up to ten years, the website privacy policy explicitly provides no advance notice before changes, and marketing emails run on a legitimate interest basis for five years post-cancellation.