Privacy Policy

Overview

XPilot ("we", "us") is a Chrome extension and website that turns your activity on X into XP, levels, and streaks. This policy explains what we collect, why we collect it, and how you can reach us.

Information we collect

Depending on how you use XPilot, we may collect:

• Account data from X: when you sign in with X, we receive your X user ID, username, display name, and profile image. We request the OAuth scopes users.read and tweet.read. X access tokens are used only during sign-in to fetch your profile and are not stored.
• Gameplay progress: XP, level, streak, and last-active timestamps synced from the extension to our servers.
• Local extension data: game state and a session token stored in Chrome local storage on your device.
• Usage analytics: the website may use Vercel Analytics for aggregated traffic metrics.

How the extension works

The Chrome extension runs on x.com and twitter.com to detect your own posts, replies, likes, and similar interactions in the browser so it can award XP. Activity detection happens in your browser session. We do not sell scrapes of other people's content, and we do not use your account to post or act on X without your action.

How we use information

• Authenticate you and maintain your XPilot account
• Calculate and sync XP, levels, and streaks
• Operate, secure, and improve the product

Storage and processors

Account and progress data are stored in our database (hosted via Neon). The website and APIs are hosted on Vercel. Auth tokens and progress may also be stored locally in the extension. We do not sell your personal data.

Data retention

We keep account and progress data while your account is active. You can sign out of the extension at any time, which clears the local session token. To request deletion of server-side account data, contact us using the details below.

Your choices

• Sign out from the extension popup to clear the local session
• Uninstall the extension to remove local extension storage
• Revoke XPilot access from your X account settings at any time
• Request account deletion by contacting us

Children

XPilot is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes

We may update this policy as the product evolves. The "Last updated" date at the top will change when we do. Continued use of XPilot after an update means you accept the revised policy.

Contact

Questions about privacy or data requests: x.com/alexcloudstar.