Privacy Policy

Your privacy is important to us. Here's how XCuts handles your data.

Last updated: January 1, 1970

Privacy Policy

XCuts is built to need as little of your data as possible. This page explains exactly what that means.

The short version

  • There is no account, no login, and no backend server for XCuts.
  • We don't collect, track, or store anything about you or your usage.
  • Your settings and your OpenAI API key (if you add one) are saved locally in your browser and never sent to us.
  • If you use the AI enhancement feature, your draft text and API key go directly from your browser to OpenAI — we never see or relay that traffic.
  • We don't sell or share data, because we don't have any to sell or share.

What we don't collect

XCuts has no server component. There is nothing for the extension to send data to, so there is no analytics, no crash reporting, no usage tracking, and no account system. We have no way of knowing who has installed the extension, how it's used, or what you post.

What's stored, and where

The extension stores a small amount of data locally in your browser using the standard chrome.storage.local API:

  • Your preferences (theme, default schedule offset, randomize-minutes setting, timezone preview choices, focus mode state).
  • Your OpenAI API key, if you choose to add one for AI tweet enhancement.

This data stays on your device, inside your browser's extension storage. It is never transmitted to us — again, because we don't run a server for it to go to. Uninstalling the extension or clearing its storage removes this data.

AI tweet enhancement and OpenAI

The AI enhancement feature is optional and only runs when you trigger it. When you use it:

  1. Your draft text and your OpenAI API key are read from local storage.
  2. Your browser sends a request directly to OpenAI's API (api.openai.com).
  3. OpenAI's response is shown back to you in the composer.

XCuts is a pass-through for this one request — the data never touches a server we operate. Your use of this feature is governed by OpenAI's own privacy policy, and any usage costs are billed directly by OpenAI to your account. We recommend reviewing OpenAI's policy if you plan to use this feature.

Browser permissions

The extension requests a small set of permissions, each used only for what's described:

  • storage — to save your settings and API key locally in your browser, as described above.
  • clipboardRead — to read the clipboard when you paste text into the composer.
  • Host access to x.com / twitter.com — to inject the scheduling, timezone preview, and focus mode UI into the page.
  • Host access to api.openai.com — to send the AI enhancement requests you explicitly trigger, described above.

No other sites are accessed, and no permission is used for tracking or analytics.

Cookies and tracking

XCuts does not use cookies, pixels, fingerprinting, or any other tracking technology. We have no analytics of any kind.

Children's privacy

XCuts does not knowingly collect data from anyone, of any age, because it does not collect data at all.

Changes to this policy

If this policy changes, the update will be published on this page.

Contact

Questions about this policy? Reach out at hello@aiagent.app or open an issue on GitHub.