Personal Cloud

Since 0.6.0 Requires Cloak Proxy 0.6.0 or later.

Personal Cloud syncs Cloak Proxy's rules, mock sets and API workspaces between your Macs, end-to-end encrypted, and shares captured requests as encrypted links.

Personal Cloud is an optional, paid add-on to Cloak Proxy. It keeps your rules, mock sets, API client workspaces, scopes and saved queries the same on all your Macs, and lets you send captured requests, a saved session or a HAR file to someone as a link they open in a browser. Everything is encrypted on your Mac before it’s uploaded, with keys that only your computers hold: Subcloak stores your data but can’t read it.

Cloak Proxy itself stays free for life. Every feature outside Cloud works without an account, and Cloud is off until you buy it in Settings › Cloud. Nothing leaves your Mac until you choose what syncs.

What you can do

Sync between Macs

Rules, rule sets and folders, mock sets, API client workspaces, scopes, saved queries, highlight rules and filters follow you to every Mac you approve, on up to 5 Macs. See What syncs.

Share captured requests

Send a link to a few requests or a saved file. The recipient opens them read-only in a browser, with known secret formats redacted, and you see when and from where it was opened. See Share links.

Approve every Mac yourself

A new Mac joins only after you compare a 6-digit code on both screens, then restores everything in one step. See Add another Mac.

Keep a way back in

A Recovery Kit gets your data back if you lose every Mac. See Recovery Kit.

What syncs and what stays on each Mac

You choose what syncs, type by type, and can change it any time in Settings › Cloud › What syncs.

Syncs (when you tick it)	Stays on each Mac
Rules, rule sets and folders: Map Local, Map Remote, Rewrite, scripts, Block List, Allow List, breakpoints, Network Conditions, DNS Spoofing, alerts and failure scenarios	The root certificate and its private key
Mock sets (including recorded responses), without recorded credential headers	Keychain tokens, `.env` files and AI keys
API client workspaces: collections, requests, environments, specs, flows, datasets, script packages and comments	Proxy and client-certificate passwords
Scopes, saved queries, highlight rules and filters	Which scope is active
Settings (a short list), off by default: SSL Proxying hosts, Bypass hosts, muted hosts, the external proxy and client certificate hosts	The on/off switch of each debugging tool, and of every rule that can act on your Mac
Secret variable values, only if you tick it	File paths, “skip certificate checks” switches, history, Recently Deleted and monitors

Some synced changes can do real harm on another Mac, such as a script or a Map Local rule that reads a local file. Those arrive switched off, and you review them before they run. The full list is on What syncs.

Pricing

Plan	Price
Personal yearly	$25 a year (save 31%)
Personal monthly	$3 a month
Founding offer	$20 for your first year, then $25 a year. Yearly plan only, for the first 50 yearly buyers. The app shows it while places are left.

There’s no free trial. You buy Personal Cloud in the app, and get a full refund within 30 days if it isn’t for you.

A plan covers up to 5 computers and 5 GB of encrypted storage.
Polar is our merchant of record and handles tax. You pay on Polar’s checkout page, and Polar sends the receipts.
30-day refunds, no questions.
If you cancel, Cloud works until the end of the period you paid for. Then your Cloud data is read-only for 30 days, and then deleted. The data on your Macs is never affected.

See Plans and billing for checkout, managing billing and cancelling.

How your data is protected

End-to-end encrypted. Your Macs encrypt everything with AES-256-GCM before it’s uploaded. The keys live in each Mac’s Keychain and on your Recovery Kit, never on Subcloak’s server.
Your Macs check the server. Every change is signed by the Mac that made it, and the list of your computers is a signed, chained record. A Mac refuses data, keys or computers that your own computers didn’t sign.
You approve every computer. A new Mac gets your account key only after you’ve compared a code on both screens and approved it.
A Security code to compare. Settings › Cloud › Devices shows a 12-digit code worked out from your account’s computers and keys. If it’s the same on all your Macs, they agree on who can read your data.

Security and privacy explains the design, what Subcloak can and can’t see, and the limits.

Personal Cloud and Team Cloud

Since 0.7.0

Personal Cloud is for one person’s own Macs. Team Cloud is the plan for a team: shared workspaces, rule and mock sets, a vault with per-person access, reviews, CI, SSO and SCIM, bought per seat in a web console. They’re separate subscriptions with separate keys: a Team seat doesn’t include Personal Cloud, and you can use both on the same Mac. Nothing moves between them unless you choose Copy to Team… or Copy to Personal.

	Personal Cloud	Team Cloud
For	Your own Macs	A team
Bought	In the app, Settings › Cloud	In the console, `console.subcloak.com/start`
Price	$3 a month or $25 a year	$5 a seat a month, or $48 a seat a year, 2 seats minimum
Share links	Yes	No
Shared spaces, vault, reviews, CI, SSO, SCIM, audit log	No	Yes

If your organization manages your Mac

An administrator can turn Cloud off with a managed preference. Settings › Cloud then says Personal Cloud is turned off by your organisation: sync stops, Cloak Proxy makes no Cloud connections on that Mac, and your rules, mocks and API workspaces there stay as they are. Data already in your Personal Cloud account isn’t deleted. To delete it, sign in from a computer your organization doesn’t manage, or email hello@subcloak.com.

Managed preference (domain `com.subcloak.cloakproxy`)	Type	What it does
`CloudDisabled`	Boolean	`true` turns off Cloud completely: no Cloud settings, no hints and no Cloud connections.
`CloudShareLinksDisabled`	Boolean	`true` hides share links (the app, the `create_share_link` MCP tool and `cloakctl share`).
`CloudPersonalDisabled` Since 0.7.0	Boolean	`true` turns off Personal Cloud only, and leaves Team Cloud on. `CloudDisabled` turns off both.

See Deploy to a team for configuration profiles.

Get startedSign in, set up your first Mac and save the Recovery Kit.

What syncsEvery type, what stays on each Mac, and conflicts.

Security and privacyHow the encryption works and what Subcloak can see.

Plans and billingPrices, checkout, refunds and cancelling.