Privacy Policy

Last updated: July 22, 2026

1. Scope

This Privacy Policy explains how Xhancer ("Xhancer," "we," "us," or "our") handles information when you use the Xhancer browser extension, xhancer.com, and related account, payment, public-post viewing, download, analytics, and AI features (collectively, the "Service").

Xhancer is a local-first browser extension for enhancing the X/Twitter web experience. Most workspace data created by the extension stays in your browser. Some features, such as account authentication, Premium verification, payments, website analytics, and server-assisted AI, require data to be sent to us or to third-party providers. This Policy describes those differences.

Xhancer is an independent product and is not affiliated with, endorsed by, or sponsored by X Corp.

2. Information Stored Locally by the Extension

The extension uses browser extension storage and IndexedDB to keep product data on your device. Depending on which features you use, local data may include:

Extension settings, language, theme, feature switches, and local usage counters
A locally generated analytics identifier and temporary analytics session identifier
Basic X account and public profile information needed to organize content, such as handles, display names, avatars, and user IDs
User remarks, custom names, tags, descriptions, avatar references, and pinyin search fields
Following-list data used for enhanced @mention matching
Synced or archived X posts, bookmarks, lists, associated public metadata, media references, and sync configuration
X browsing-duration records
Locally generated account-analysis data and saved analysis reports
Custom AI agents, prompts, instructions, and memory or knowledge entries
A cached copy of your Xhancer account and Premium status

This local workspace data is not automatically uploaded to an Xhancer database. The extension may read content available in your current X session and call X endpoints using your browser session to provide sync, search, analysis, and interface-enhancement features. Those requests are sent to X, not to Xhancer, unless a feature expressly uses an Xhancer endpoint as described below.

You can manage individual records in the extension, export supported data, import a backup, and clear supported local data from the extension interface. Uninstalling the extension normally removes its extension storage, subject to your browser's behavior and any backups or exported files you retain.

3. Information Processed by Xhancer Services

Account and authentication data

If you create or use an account, we may process:

Email address, display name, avatar, internal user ID, account status, and account timestamps
A password hash if you register with email and password; we do not store your plain-text password
Authentication provider, provider account ID, and profile information returned by Google or X when you choose social login
Session and authentication information, including cookies or tokens needed to keep you signed in
The IP address associated with email registration and technical request information made available by our hosting provider

Email verification messages are delivered through an email service provider. Social-login providers separately process your information under their own terms and privacy policies.

Subscription and transaction data

When you purchase Premium, Stripe processes the checkout and payment method details. We may receive and store information such as:

Your Xhancer user ID and account email
Selected plan, billing interval, payment type, amount, currency, status, and relevant timestamps
Stripe checkout, customer, subscription, or transaction references
Premium start and expiration dates
Limited acquisition and checkout analytics metadata

We do not directly receive or store your full card number or full payment-account credentials. Stripe may collect those details directly under the Stripe Privacy Policy.

AI inputs and outputs

When you run a custom Xhancer AI agent, the extension sends the assembled prompt to Xhancer. Depending on your agent configuration and action, the prompt may include:

Text you entered in the X composer
The public X post to which you are replying
Agent instructions, templates, and memory content you selected or referenced

We forward that prompt to DeepSeek to generate a response and return the result to your browser. Xhancer does not currently save these prompts or responses in its application database, but they are processed in transit and may appear in temporary infrastructure or security logs. DeepSeek may process or retain them under its own Privacy Policy. Do not submit confidential, sensitive, or third-party personal information that you are not authorized to disclose.

Some account-analysis features use Grok through your existing X session. In that case, the prompt is sent directly from your browser to X/Grok and is governed by the X Privacy Policy. Saved analysis reports remain local unless you export or otherwise share them.

Public-post viewer and downloader

If you submit an X post URL to the website viewer or downloader, the URL is sent to Xhancer so we can request public embed data from X and return the post text, author information, and available media references. We do not currently store submitted post URLs or returned post content in the application database. Our hosting provider and X may nevertheless process request data and logs.

Support and communications

If you contact us, we process the contact details and message content you provide so we can respond, troubleshoot, and maintain a record of the request when reasonably necessary.

4. Website and Extension Analytics

We use analytics to understand whether the Service works, which features are used, and where users encounter errors.

Google Analytics

The website and extension may send Google Analytics information such as:

A randomly generated client identifier and session information
Page or extension-screen views
Extension version and product surface
Feature selection, success, failure, limit, authentication, and checkout events
Referral, campaign, locale, plan, and billing-interval information
Browser, device, approximate location, IP-derived, and diagnostic information collected by Google
Your internal Xhancer user ID when you are signed in on the website

Extension analytics events are designed to describe product usage and do not intentionally include the contents of your remarks, archived posts, bookmarks, agent memories, or AI prompts. Google describes its data practices and controls in the Google Privacy Policy.

Microsoft Clarity

The website may use Microsoft Clarity to understand website interaction and diagnose usability problems. Clarity can collect clicks, scrolling, pointer movement, navigation, page rendering, device and browser details, and session-replay information. Microsoft describes this processing in the Microsoft Privacy Statement.

Advertising

The website may display advertising through Google AdSense. Google and its partners may use cookies, device identifiers, page activity, and ad interactions to deliver, limit, personalize where permitted, and measure advertising. Available choices depend on your region, consent selections, browser settings, and Google settings.

5. Cookies and Similar Technologies

The website uses cookies, local storage, and similar technologies for:

Authentication and session security
Language, theme, and other preferences
Analytics, attribution, and service improvement
Advertising and ad measurement where enabled

You can control cookies through your browser and, where provided, our consent controls. Blocking essential cookies may prevent login or other account features from working. You can also use privacy controls made available by Google, Microsoft, and other providers.

6. How We Use Information

We use information to:

Provide, operate, and secure the Service
Authenticate accounts and verify Premium access
Process purchases, subscriptions, cancellations, and payment events
Deliver email verification and service-related communications
Process AI requests that you initiate
Return public X post and media information requested through website tools
Enforce product limits and prevent fraud, abuse, and unauthorized access
Diagnose failures, measure product performance, and improve features
Comply with applicable law and protect users, Xhancer, and others

Where applicable law requires a legal basis, we rely on performance of our contract with you, our legitimate interests in operating and securing the Service, compliance with legal obligations, and consent where required, including for certain cookies, analytics, advertising, or marketing activities.

7. When We Disclose Information

We may disclose information to:

Cloudflare and infrastructure providers for hosting, content delivery, security, databases, and request processing
Google and X for authentication when you select the corresponding login method
Stripe and payment partners for checkout, payment processing, fraud prevention, subscription management, refunds, and disputes
Resend or another email provider to deliver verification and service emails; see the Resend Privacy Policy
DeepSeek to process custom AI-agent prompts
X/Grok when extension features make requests through your X session
Google Analytics, Microsoft Clarity, and Google AdSense for analytics, diagnostics, and advertising as described above
Professional advisers, authorities, or other parties when reasonably necessary to comply with law, respond to legal process, investigate abuse, or protect rights and safety
A successor or transaction participant in connection with a merger, financing, acquisition, reorganization, or sale of all or part of the Service, subject to appropriate safeguards

We do not sell personal information for money. Our use of advertising and analytics providers may be treated as a "sale," "sharing," or targeted advertising under some privacy laws. Where those laws apply, you may have the right to opt out.

Third-party providers process information under their own contracts, settings, and privacy policies. Cloudflare's practices are described in its Privacy Policy.

8. Retention

We retain information only for as long as reasonably needed for the purposes described in this Policy:

Local extension data remains until you delete it, clear the relevant browser data, reset the extension, or uninstall it
Account and Premium-status data is generally kept while your account remains active and for a reasonable period afterward
Transaction and payment records may be retained longer for accounting, tax, fraud-prevention, chargeback, and legal obligations
Support records are retained as needed to resolve requests and maintain service history
Security and infrastructure logs are retained according to operational needs and provider settings
Analytics, advertising, and third-party AI data is retained according to our configuration and the applicable provider's policies

Backup copies may persist for a limited period after deletion. We may retain information longer when required by law, to resolve disputes, or to enforce agreements.

9. Security

We use reasonable administrative and technical measures designed to protect information, including transport encryption, hashed account passwords, access controls, and managed infrastructure. No service or storage system is completely secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur.

You are responsible for protecting your account, browser profile, exported files, and device. Contact us promptly if you believe your Xhancer account has been compromised.

10. Your Choices and Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information, withdraw consent, or opt out of certain advertising-related disclosures. You may also have the right to appeal a decision or complain to a privacy regulator.

You can take several actions directly:

Change extension feature switches, including browsing-duration tracking and automatic sync
Delete supported extension records or clear local data
Export supported local data and retain your own backup
Uninstall the extension to remove its browser-managed storage, subject to browser behavior
Manage cookies, advertising preferences, and provider privacy controls
Cancel an eligible recurring subscription through the available Stripe billing portal

To request access, correction, account deletion, or another privacy action that is not available in the product, email support@xhancer.com. We may need to verify your identity and may retain information where permitted or required by law.

11. International Processing

Xhancer and its providers may process information in countries other than the one where you live. Those countries may have different data-protection laws. Where required, the relevant parties use legally recognized safeguards for international transfers.

12. Children's Privacy

The Service is not directed to children under 13. You must also meet any higher minimum age required in your country to consent to online services or data processing. We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information improperly, contact us so we can investigate and take appropriate action.

13. Changes to This Policy

We may update this Policy as the Service, providers, or legal requirements change. We will post the updated version here and revise the "Last updated" date. If a change materially affects how we use personal information, we will provide additional notice when reasonably required.

14. Contact

For privacy questions or requests, contact:

Email: support@xhancer.com
Website: https://xhancer.com