Security
See how data is stored, which actions stay on your computer, and what you still need to keep safe.
Protection in place
These protections are already part of MaskPilot and are visible in everyday use.
Backups
Account data is encrypted on your computer, so the cloud does not receive browser files that can be opened directly.
Each account is encrypted separately. MaskPilot securely keeps the key needed to restore data on another device.
On this computer
Other devices on your local network cannot directly connect to these tools.
AI still checks your identity and permissions. Closing MaskPilot also closes its local AI connection.
Signed-in devices
Sign-in information is protected and refreshed over time to reduce the risk of long-lived access.
You can review signed-in devices and remove one you no longer use or recognize.
Deletion & recovery
Deleting an account does not immediately remove its recovery data, avoiding irreversible loss from one mistake.
Only the account owner can view and use recovery options.
Updates
Builds that are being tested or released in stages are not presented as stable public downloads.
The website provides a SHA-256 value, and MaskPilot checks downloads for corruption or the wrong version.
Teammate access
Admins choose which accounts teammates can see and whether they can manage proxies, share accounts, or use AI.
AI follows the same access rules and cannot bypass an admin’s settings.
What you still need to know
These details also affect the safety of your data.
This is needed to restore data on another device, so MaskPilot does not claim the service can never decrypt data.
Larger setups still need suitable gateways, monitoring, and shared team protections.
Limiting network access does not replace system updates, disk encryption, or malware protection.
Third-party security or audit badges appear only after they exist and can be publicly verified.
Paths you can check
Protections should map to data, user controls, and release behavior. These paths explain boundaries instead of replacing facts with certifications that do not exist.
The privacy page separates account information, browser environments, proxy and AI activity, device state, orders, and website analytics, then lists the controls available to you.
The service must keep the key required to restore data on another device. The data lifecycle explains device upload settings, encryption, version conflicts, deletion, and recovery together.
The direct download and release metadata are separate. Available releases show version, date, file size, and SHA-256. When metadata is unavailable, the page does not invent version details.
Understand the boundaries first
Read the privacy policy and data lifecycle first. If anything remains unclear, contact MaskPilot through the public support email.
MaskPilot