← Back to browse

Cloaky

Privacy masks for any window on macOS

Productivity

Added April 24, 2026 · Last analysed April 24, 2026 · via

StackScope records what new websites are built with, the week they launch. Most we find ourselves, by watching public internet infrastructure for brand-new sites; the rest come from Product Hunt, Hacker News and PeerPush. We crawled this one for its tech stack and scored it for launch readiness: DNS, security headers, SEO basics. This page is what we saw on 24 April 2026; the live site may have changed since.

Every technology below links to its own page: which other new sites launched with it. Vendors and agencies watch those pages with Stackdar and hear about new adopters the week they ship, from £15 a month.

Cloaky looks production-ready overall, with complete legal pages, fast page loads, and clean crawl signals. What needs work: missing several security headers, tracking cookies set before any opt-in, and incomplete email security.

Launched on Product Hunt on April 24, 2026. The site is hosted on Vercel, with a domain registered 3 weeks before launch. We've detected 9 technologies on this site, covering analytics, DNS providers, email forwarding, and web fonts. The stack includes Hugo, Cloudflare DNS, and Cloudflare Email Routing.

It's on a stack we've seen on only 2 launches.

If you own this site, refresh the snapshot and see the full fix list any time →

6.3
StackScope Score
Good
52/100 Launch Readiness
Partially ready
3/3* Legal
Complete*
2/2 Crawl files
Complete
Vibe Score 0 · No AI signals
How much the site looks AI-generated. Informational pattern-match signal, not a verdict. Does not feed the StackScope Score. See which fingerprints fired →

Tech Stack (9)

Infrastructure
DNS Cloudflare DNS
Hosting Vercel (2)
Security HSTS (2)
Email
Email forwarding Cloudflare Email Routing (2)
Build & Framework
Font Google Fonts
Meta-framework Hugo
Package CDN jsDelivr (2)
Analytics & Marketing
Analytics Google Analytics (3)
SEO Google Search Console

Infrastructure

Network
AS16509 · US
DNS
Cloudflare DNS
Authoritative nameserver
DNSSEC
Not enabled
DNS responses unsigned. Cache-poisoning vulnerable.
Green hosting
Not green hosted
No green-energy record. Data from The Green Web Foundation.
SSL Certificate
Let's Encrypt
Valid 31 Mar 2026 to 29 Jun 2026
Certificate as captured in this snapshot, not a live check.
Domain Age
5 months
Registered Mar 2026 · Cloudflare, Inc.

Email Security

SPF ~all Soft-fail (~all). Common and accepted.
?
DKIM Not detected at common selectors. Your provider may use a custom one.
DMARC Not published. Receivers fall back to permissive defaults.
?
MTA-STS Not deployed. Mail to your domain can be downgraded to plaintext en route.
?
TLS-RPT Not configured. You won't hear about silent SMTP TLS handshake failures.

Storage (2)

Cookies (2)
NameLifetimeDetected as
_ga 1y Google Analytics
_ga_9DMHGW5HW7 1y Google Analytics

Readiness Breakdown How?

Custom title and meta description (partial) missing meta description
Responsive viewport meta tag
Favicon present
Semantic HTML (nav, main, article)
- Open Graph tags (title, image, description)
- Canonical URL declared
- Twitter card meta tags

AI Stance

No AI stance declared
llms.txt published
No AI bots blocked in robots.txt
? No directive declared
? None advertised

Well-Known Files

robots.txt
sitemap.xml (5 URLs)
security.txt
llms.txt
ads.txt
humans.txt
Privacy Policy
/privacy/
Terms of Service
/terms/
? Consent manager not detected
Analytics set tracking cookies on our visit, with no opt-in step.
88% unique

Security Headers (1/6)

Permissions-Policy experimental (check browser support)
X-XSS-Protection deprecated (use Content-Security-Policy)

Performance

53ms response time
Faster than 94% of sites
4 third-party domains loaded

Build

2 JS files
2 CSS files
4 Third-party domains

Brand Colours

App Manifest

pollo
6 icons
Something not look right? If a technology shown here is wrong or out of date, email [email protected] and we'll review it.