Native macOS · Open source

Built to resume. Finished with a record.

Plan parallel ranges automatically or choose the connection count. CloakDrop restores saved progress after relaunch and verifies available checksums locally before the finished file appears.

Get the beta See it work

Apple silicon · macOS 26 or later

MIT licensed · No account required

The CloakDrop app window showing an Ubuntu ISO transfer planned across eight ranges for this example, with live speed, ETA, and per-range progress above a library of completed downloads. — NATIVE APP PREVIEW · ADAPTIVE RANGE TRANSFER Example · 8 ranges planned

01 1–32 maximum setting range
02 4 HTTP · HTTPS · FTP · FTPS
03 Local verification & receipts
04 0 app telemetry endpoints

01 — The transfer

Watch the whole job move.

From the first link to the final folder, each stage stays legible and under your control.

Transfer

CONFIGURED EXAMPLE / 8 PLANNED RANGES

Close the app. Keep your place.

Eligible files split across validated parallel byte ranges. Automatic mode sizes the plan up to your ceiling, or you can choose the connection count. Compatible saved offsets restore after relaunch.

Automatic or manual count
Validated range responses
Safe single-stream fallback

ubuntu-26.04.iso 6.52 GB · manual eight-connection example

Ready — configured ranges primed

01 531,382,272
02 1,253,949,440
03 2,335,014,912
04 3,078,045,696
05 4,026,531,840
06 4,711,964,672
07 5,710,567,424
08 6,194,479,104

Manual demonstration. It never starts or repeats on its own.

Capture

FOUR WAYS IN / ONE LOCAL PATH

Bring the link. Keep your flow.

Paste a URL, drag a link, share from another app, or use the built-in browser. Video formats and ordinary files land in the same engine.

Built-in WebKit browser
Bundled video resolver
Files, HLS and DASH

PasteA copied URL

DragA link or page URL

ShareFrom another app

BrowseBuilt-in WebKit

ON-DEVICE RESOLVER READY

Bundledsupported-page resolver

FILESHTTP · HTTPS · FTP
MEDIAHLS · DASH · VIDEO
PAYLOADCLOAKDROP ENGINE

SAME NATIVE ENGINE

One queue, whatever the source.

Files and media enter the same sandboxed transfer system. yt-dlp can resolve a submitted page; CloakDrop transfers the selected payload.

Finish

ROUTING / LIMITS / POST-PROCESSING

Set the rules once.

The Main Queue, routing rules, duplicate detection, speed profiles, and guarded post-processing take care of the work after a link is added.

First-match routing rules
Shared aggregate limits
Optional post-processing

RULE MATCHED

lecture-07.webmMEDIA / VIDEO

IF Type is video THEN Movies folder · 24 MB/s cap

MAIN QUEUE2 active

The queue persists order. The limiter owns the total.

lecture-07.webm12.6 MB/s

ACTIVE

field-notes.zip8.4 MB/s

ACTIVE

soundtrack.flacScheduled for 19:00

SCHEDULED

AGGREGATE LIMIT24 MB/s

One sustained cap shared across active workers.

AFTER TRANSFER

01
Combine mediaAudio + video, no re-encode
READY
02
Guarded extractionZIP-Slip and bomb checks
OPTIONAL
03
Run an all-done actionWhen no unfinished work remains
OPTIONAL

DESTINATIONMovies / Lectures

VERIFICATION CHAMBER LOCAL · AFTER COMPLETION

02 — Local verification

A local record of what arrived.

When checksum verification is enabled (the default), a supplied or same-origin discovered checksum is tested against private staging bytes before the final file is exposed. When receipt generation is enabled, a completed ordinary file download can then generate an exportable Provenance Receipt — source, transport security, whole-file SHA-256, and any available checksum or code-signature result. Checksum discovery stays same-origin; .app and .dmg files can also receive an offline signature assessment.

PROVENANCE RECEIPT LOCAL

FILE: CloakDrop-1.0.dmg
SIZE: 44,875,776 bytes
SOURCE: github.com/cloakyard
TRANSPORT: ENCRYPTED (TLS)
SHA-256: a1b4…9f2e
SIGNATURE: VALID

TRUST ✓ VERIFIED

View receipt tests See the privacy model

03 — Native control deck

Serious tools, already inside.

Routing, diagnosis, local statistics, and ambient controls—without a companion utility or account.

Proxy routing

Choose system, direct, or manual HTTP, HTTPS, or SOCKS5 routing for HTTP-based downloads and speed tests. Manual routing is mirrored into the built-in browser.

System
Direct
Manual

Built-in speed test

Run Cloudflare or Ookla only when you choose. Measure download, upload, idle and loaded latency, and jitter.

Download
Upload
Latency

Local download stats

See today, this month, and all-time totals with a monthly rank. Everything is resettable and stored on this Mac.

Today
Month
All time

Menu bar & Dock

See aggregate speed and progress, inspect active work, and pause or resume without bringing the main window forward.

Live speed
Progress
Controls

04 — The network boundary

No telemetry. A defined network boundary.

CloakDrop has no accounts, analytics, telemetry, automatic crash uploads, or update pings. Network activity is limited to transfers and features you start or configure. App state stays in local storage, browser data stays in WebKit, and remembered site and proxy credentials use Keychain. Credentials attached to a download can also remain in its local record so that transfer can resume.

Read the privacy policy

NETWORK BOUNDARY FEATURE SCOPED

01 / INPUT Initiated or configured Transfer · browser · resolver · speed test · blocklist

02 / SANDBOXED CloakDrop Request stays tied to a product feature

03A / NETWORK Chosen service origin · page · proxy · provider

03B / LOCAL Selected destination & app storage file · SQLite · WebKit · Keychain

ROUTES THAT DO NOT EXIST

Telemetry endpoints NO ROUTE
Accounts NO ROUTE
Automatic crash uploads NO ROUTE
Update pings NO ROUTE

05 — Download

Public beta status

Follow the beta at the source.

This page documents the current source; published beta builds may lag behind it. GitHub Releases lists each available build, its checksum, release notes, and current installation guidance—without an updater account or mailing-list gate.

Apple silicon macOS 26 or later Free · MIT licensed

Open GitHub Releases Read the source