cloaktranslate Cloak it first
Content-blind translation

Translate the papers
you'd rather not send unprotected.

Contracts, medical notes, HR letters — the text you need in another language but would never paste into a public translator. cloak-translate replaces the names, IDs and addresses it detects with realistic stand-ins on your device, then sends the reviewed text for translation. A value the detector misses may remain as written. Detected values are mapped back into the result. Review the request text before sending; the preview does not measure egress bytes.

After a successful send, the on-device receipt records the size and SHA-256 fingerprint of the exact request body sent, without storing its text.

Known limit in Release 1: if someone sends text directly to this site's address instead of using this page, the on-device replacements do not run.

Open the bench Detection limits
  • Detected values replaced before sending
  • 18 languages, Latin to CJK
  • On-device receipt
Try
Your textdusk · source
Waiting for text…
Egress monitor 0 raw-PII bytes
On-device
0
Gateway relay
0sends
Third-party
0
Translationdawn · Spanish

Your translation will appear here.

Cloak first — press Translate to relay the surrogate text.

The crossing, in three moves

01

Detect & cloak, on-device

A WebAssembly engine plus a multilingual name model look for names, emails, phones, cards, IBANs and IDs — across Latin, Cyrillic, Arabic, Devanagari and CJK — and replace values they detect with realistic surrogates. Structured identifiers match by rule; free-form names rely on the on-device model, so an unusual one can slip past and remain as written. Review the request text before sending; the preview does not measure egress bytes. Detection sends no text; this step only downloads detection models from this site.

02

Relay a cloaked copy

The reviewed text is sent to the translation model through the CloakAPI gateway with a cryptographic pre-tokenisation proof. Values detected on-device are replaced; a value the detector misses may remain as written. The re-identification map stays in the tab.

03

Un-cloak the result

The translation returns carrying the same surrogates; cloak-translate maps them back to your real values on-device, and issues an on-device receipt with the category counts and the SHA-256 of the cloaked text you reviewed for sending. It does not measure what the detector missed.