Protect contact information on Webflow sites from scrapers and bots.
ContactCloak™ encrypts your email addresses and phone numbers in your HTML, making them invisible to bots and scrapers while remaining fully functional for real users. When visitors load your page, ContactCloak™ automatically decrypts and displays your contact information, ensuring a seamless user experience without compromising security.
Email protection — Encrypts email addresses in mailto links to prevent scraping
Phone number protection — Encrypts phone numbers in tel links to prevent harvesting
Text encryption — Encrypts any sensitive text content that you want to protect
Zero dependencies — Lightweight and fast-loading
Webflow-friendly — Works seamlessly with Webflow sites
Automatic decryption — Contact information is automatically decrypted on page load for real users
Add this script to your Webflow project's global <head> settings:
<!-- ContactCloak™ by Reform Digital® -->
<script
src="https://cdn.jsdelivr.net/npm/@reform-digital/contact-cloak@1.0.2/prod/contact-cloak.js"
defer
></script>Generate encrypted values with the Contact Cloak encryption tool.
rd-cc-email
<a>
Sets its href to the decrypted mailto: link
rd-cc-phone
<a>
Sets its href to the decrypted tel: link
rd-cc-text
Any element
Displays the decrypted value as text
Use generic link labels such as “Email us” and “Call us.” Writing the original contact details inside the HTML would expose them to scrapers.
On page load, ContactCloak™ finds the supported rd-cc-* attributes, decrypts values generated by the Contact Cloak encryption tool, and updates each element. Visitors receive functional links and readable text while the original contact information remains absent from the HTML source.
ContactCloak™ sends one lightweight, anonymous installation request per product and public domain in each browser. This helps Reform Digital® understand adoption and prioritize improvements.
The request contains only:
The product identifier (CONTACT_CLOAK)
The public hostname where it is installed (for example, example.com)
Tracking does not run on localhost, private networks, or numeric IP addresses. It uses no cookies, fingerprinting, or personally identifiable information, and the aggregated data is not used for advertising or marketing.
Need help? Join the Reform Digital® Slack community.
Last updated
<!-- Email -->
<a rd-cc-email="aW5mb0BleGFtcGxlLmNvbQ==">Email us</a>
<!-- Phone -->
<a rd-cc-phone="KzExMjIzMzQ0NTU2Ng==">Call us</a>
<!-- Protected text, such as an address -->
<span rd-cc-text="TmV3IFlvcmssIE5ZIDEwMDAx"></span>