X-to-Discord Alerts Privacy Policy

X-to-Discord Alerts forwards Subscriber-only posts that a user is authorized to view on X to a Discord webhook selected by that user.

Data we process

• The extension reads the auth_token, ct0, and twid cookies from the user's active X session to verify the account and retrieve content it can access.
• The extension reads the URL of the active X or Twitter tab when the user opens it, solely to identify the selected creator. Browsing history is not collected or retained.
• X session values are encrypted on the server with AES-256-GCM and are never returned by the API or written to application logs.
• A Discord webhook URL is stored only to deliver alerts. It is not returned to the extension or written to application logs.
• The service stores the X user ID, username, selected creators, monitor status, and delivery deduplication records required to operate the service.

Sharing and retention

Data is sent only to X, to retrieve content the user is authorized to access, and to the Discord webhook chosen by the user. We do not sell personal data. Logging out of one browser revokes that browser's management token but does not stop existing monitors. Deleting a monitor deletes its configuration and delivery records.

Security and service risks

Network traffic uses HTTPS. X session values are encrypted at rest, and extension access tokens are stored as one-way hashes on the server. X's non-public interfaces can change, and automated access may be rate-limited or restricted. Users must only monitor content they are authorized to access and comply with X's and Discord's terms.

Contact and deletion requests

For support or deletion of all account data, email sootowang@gmail.com. To stop an individual monitor, use Pause or Delete in the extension.