Privacy Policy

What we store

The only personal data we keep is your email address, held by our auth provider (Supabase) so you can sign in. If you connect via X (Twitter) OAuth instead, we store your X account identifier in the same way — no password is ever created or stored on our end.

We also store a record of each audit job you run (when it started, how many posts were scanned, how many were flagged) so you can return to the results list. We do not store the content of your posts anywhere on our servers.

Your posts & tweets

When you run a scan, your posts are fetched from the X API and processed on our backend to detect risky content. They pass through our servers but are never saved there. The full scan results — every post, every flag — are written only to your browser's local storage on your device.

This means if you clear your browser cache, your results are gone. We can't recover them because we never had them. That's intentional.

Payments

Payments are processed by Stripe. Your card number, CVC, and billing details go directly to Stripe — we never see or store them. We receive a record of whether a payment succeeded and how many credits were purchased; nothing more.

Analytics

We use Vercel Analyticsfor basic, anonymous page-view counts and session duration. There is no Google Analytics on this site. Vercel Analytics does not track you across other sites, does not build ad profiles, and does not do any attribution or remarketing. It tells us roughly how many people visited a page — that's all.