# Comments and notifications

> Comment on any team item, @mention teammates, and choose how Cloak Proxy and email tell you about mentions, review requests, assignments and device requests.

Source: https://docs.subcloak.com/cloak-proxy/team/comments/

Added in Cloak Proxy 0.7.0.

{/* L9 draft. Sources: PLAN 7.5, 8.4 (email caps), 10 (Comments tab, Activity popover); T10. Re-check labels against L8. */}

Anyone with a role in a team space can comment on its items: requests, rules, mock routes, library sessions, findings and vault items. Comments are end-to-end encrypted like the rest of the space. Mention a teammate with `@` to notify them.

## Comment on an item

{/* PLAN 7.5, 10 */}

Choose **Comments…** from the item's menu (or **Comments** in a vault item or library entry); comments open in a sheet. Threads have replies and **Resolve**. Typing `@` completes the names of team members who have a role in that space.

- A comment on a vault item is kept with its folder, so only the folder's members see it.
- Only a comment's author, or a manager of the space, can edit or delete it.

## Notifications

{/* PLAN 7.5; T10 client rule */}

The **Activity** button in the toolbar (a bell, with a count) lists mentions, review requests, assignments, device requests (for admins) and monitor alerts. If you allow it, Cloak Proxy also shows them as macOS notifications.

Your Mac shows a notification only after it has downloaded and checked the comment it points to and confirmed that it really mentions you. A notification the comment doesn't back up is dropped.

## Email

{/* PLAN 7.5 email, rate limit */}

Notification emails about comments, reviews and Findings carry no comment text, no space name and no item name, because those are end-to-end encrypted. (Monitor\* alert emails name the monitor and what failed: monitors run on Subcloak's servers.) A mention looks like this:

> Priya Shah mentioned you in a comment in Acme's team space. Open Cloak Proxy to read it.

The email has one button, which opens the item in Cloak Proxy. Another notification about the same comment or item within 15 minutes doesn't send a second email, and you get at most 50 notification emails a day.

## Preferences

{/* PLAN 7.5 preferences */}

Choose them in **Settings › Team › Notifications**, or in the console under **Your account**. Each kind has an app setting (on or off) and an email setting (**Instant**, **Daily digest** or **Off**; new Macs are **Instant** or **Off**). Monitor\* alerts aren't set here: they go where each monitor's alert routes say.

| Kind | Default |
|---|---|
| Mention | Instant |
| Review requested | Instant |
| Assigned | Instant |
| Device request (admins) | Instant |
| Monitor alert | As the monitor's alert routes say |

## What Subcloak sees

{/* PLAN 1.1; T10 */}

To deliver a notification, the server learns who mentioned, asked for a review from, or assigned whom, when, and in which space and item (by id). It never sees the comment text (unless an admin turns on automatic approval after SSO), and it only accepts notifications for people who have a role in the space.

## Related

  - [Protected sets and reviews](https://docs.subcloak.com/cloak-proxy/team/protected-sets/): Review requests and the Reviews window.
  - [Library and Findings](https://docs.subcloak.com/cloak-proxy/team/library-and-findings/): Assign findings to teammates.
  - [What Subcloak can and can't see](https://docs.subcloak.com/cloak-proxy/team/what-subcloak-can-see/): Notification metadata and the rest.