Privacy

What we ask X for. Read access to your profile, posts, follows, mutes and Lists. We ask for permission to mute accounts or manage Lists only when you choose to do that, on a screen that lists every change first.

What we store. Your X id and handle, your OAuth tokens (encrypted with AES-256-GCM), your audit results and your payment status. We read 50 posts from your home timeline to measure noise and keep only the totals, never the posts. From your X profile we keep your account creation date and post count, which decide whether you qualify for a free check.

How long. Raw follow data (bios and profile metrics) is deleted after 7 days. Unpaid audits lose their per-account rows after 7 days; paid reports keep only handle, label, category and reason so the report keeps working. The shareable summary card is totals only.

What we never do. Post, unfollow, sell your data, or show ads. Payments are handled by Stripe; we never see your card.

Free check limit. To keep free checks fair, we allow one per X account every 30 days. To enforce that we keep a one-way hash of your X user id and the date of your last free check for 30 days, including after you press “Delete everything”. The hash can't be turned back into your id or handle and is deleted after 30 days.

Delete everything. The “Delete everything” button on your audit revokes our X access and deletes your user, audits, reports and payment record from our database immediately (except the 30-day free-check hash above).