Protects your content by rendering it as Canvas graphics instead of HTML text. Prevents copy, paste, and scraping.
cloaked.ink injects a lightweight script tag into your site that loads the cloaked.ink widget. The widget fetches your CMS content and renders it as Canvas-drawn glyphs — no text appears in the DOM, so content cannot be selected, copied, or scraped.
How it works:
- The plugin strips full post content from the HTML response, RSS feeds, and the WordPress REST API, serving only a short excerpt
- The cloaked.ink widget fetches your content via a secure API and renders it as Canvas graphics
- Visitors read your content normally — but it cannot be selected, copied, or scraped from the page source
Features:
- Zero-config per article — the widget auto-discovers content containers
- Works with any WordPress theme
- Lightweight — single async script tag, no impact on page load speed
- Full formatting preserved (headings, paragraphs, lists, links)
- Responsive — adapts to any screen size
- Server-side content stripping — full content never appears in page HTML, RSS feeds, REST API responses, or meta tags
- Enable/disable toggle in settings
Requirements:
- A cloaked.ink account at cloaked.ink
- A registered WordPress site in the cloaked.ink dashboard
External Service (required):
This plugin depends on the cloaked.ink hosted service. It loads a JavaScript widget from https://cdn.cloaked.ink/w.js on every front-end page load. This script is the runtime client for the cloaked.ink SaaS — it creates a sandboxed iframe that communicates with https://api.cloaked.ink to fetch glyph data and render your content as Canvas graphics. The script cannot be bundled locally because it is versioned and updated as part of the service infrastructure, similar to how Stripe.js, Google reCAPTCHA, and Cloudflare Turnstile operate.
Data transmitted to cloaked.ink servers:
- Page URL (to identify which content source to render)
- Content source identifier (configured per-site in the cloaked.ink dashboard)
- Visitor IP address (hashed server-side for rate limiting, never stored in plaintext)
No cookies are set. No personal data is collected by the plugin itself.
