X Hub

Privacy Policy

Last updated: 2026-09-23  ·  Version 3.3.0

Overview

This Privacy Policy explains how X Hub ("the Extension") handles user data. The Extension is an all-in-one Chrome extension for X (Twitter) that provides three modes: Raffle (collect reposters & draw winners), Follow (mutual-follow analysis), and Filter (hide/show tweets by badge tier with a follow whitelist). The panel automatically collapses to a minimal logo button on general pages and expands on repost/likes/followers/following pages — no interaction required.

The Extension operates entirely within your browser. No user data is ever transmitted to any external server, analytics service, or third party.

1. Data We Process

The Extension temporarily processes publicly visible information rendered on the active X page, including:

  • Usernames / handles — to collect raffle participants or scan follow lists
  • Display names & bios — for search and display purposes in Raffle / Follow modes
  • Follow status indicators — "Follows you" badges used in Raffle and Follow modes
  • Verification badge data — read from the X API response (via a local fetch interceptor) to support Filter mode's VERIFIED / NON-VER tiers
  • Follow list (whitelist) — your followers/following handles, stored locally via chrome.storage.local to exempt your network from filtering

Basic UI preferences (active mode, filter settings, language) are also persisted locally in chrome.storage.local for your convenience.

2. Comprehensive Disclosure

2-a. How We Collect, Use, and Store

  • Collect: When you open a supported X page and activate a feature, the Extension reads the public DOM and (for Filter mode) intercepts X's own GraphQL API responses locally. Vertical loads normal X pages and their resources; collection tabs also load X pages.
  • Use: Data is used exclusively for de-duplication, filtering, random drawing, mutual-follow scanning, tweet visibility filtering, and exporting results to your clipboard.
  • Store (session): Raffle and Follow scan lists exist only in memory and disappear when the tab is closed.
  • Store (persistent): Filter mode settings and your follow whitelist are saved in chrome.storage.local so they persist across sessions. This data never leaves your device.
  • Share: Data is never shared automatically. When you click Copy (Text / CSV / JSON), you decide who receives the exported data.

2-b. Parties With Whom Data Is Shared

We do not share any user data with third parties. The Extension contains no tracking analytics, advertising SDKs, remote servers, or cloud-sync functionality. X page requests and actions continue to communicate with X. Exported lists are shared only when you choose to share them.

3. Permissions Used

Vertical loads ordinary X pages in separate same-origin frames using your existing X session. X receives the normal page, media, search and interaction requests. X HUB does not operate a collection server. Column names, paths, search queries and widths are saved only in local extension storage. Temporary collection-tab ownership is stored in session storage.

  • declarativeNetRequestWithHostAccess — Sets X-Frame-Options to SAMEORIGIN only for token-marked X subframes in a tab where Vertical is active. Content Security Policy is preserved. Rules are removed on exit, tab close or top-level navigation.
  • storage — Required by Filter mode to persist your follow whitelist and settings locally via chrome.storage.local.
  • host_permissions: https://x.com/*, https://twitter.com/*, https://api.x.com/* — Required to read the page DOM and to allow the local fetch interceptor to capture X's API badge responses without sending data anywhere.
  • Tabs API (background.js; no tabs permission required) — Used solely to open and close background tabs for auto-collecting your followers/following list as part of the Filter mode whitelist sync.

Additional Information

  • Security: All data processing is strictly confined to your local browser environment.
  • Children: This is a general utility tool not directed at children.
  • Changes: If future feature updates require changes to this policy, the updated date will be reflected at the top of this page.
  • Contact: Questions? Reach us at jtech-bryan@proton.me.