Xchedule Privacy Policy

Effective date: 2026-05-08

Summary. Xchedule pre-fills X.com's post-scheduling dialog with time slots you set up in advance. A free tier covers up to two slots; a premium tier with unlimited slots is unlocked by a one-time USDC purchase on the Base blockchain. The extension is designed to need almost nothing from you, and this policy reflects that.

What the extension reads on x.com. The extension only reads and fills the post-scheduling dialog's time and date controls when you open it. It does not read the contents of your posts, your timeline, your direct messages, your followers, your account details, or any other part of the site. It makes no network requests from x.com pages.

Information stored on your device. The extension stores a small amount of configuration using the browser's built-in extension storage APIs:

Synced settings (browser.storage.sync): your time slots (HH:MM strings), which slot is active, whether autofill is paused, your premium flag, and — if you have activated premium — your license key. Your browser may automatically replicate this data across browsers signed into the same browser-sync account, so a single license activation works on all your devices. The data is transmitted and stored by your browser vendor's sync service, not by us.
Local-only state (browser.storage.local): per-slot "next date" counters used to auto-advance the date after each scheduled post. This data stays on the device it was created on.
You can erase all of this at any time by uninstalling the extension or clearing its storage from about:addons.

Information sent to our server. Activation is the only time the extension contacts our server. When you submit a license key in the popup, the extension makes a single POST request to https://xchedule.xyz/api/activate with the key in the request body. Our server hashes the key with keccak256, verifies the hash against the on-chain registry, and submits a "consume" transaction on Base that marks the key used. The plaintext key exists only in request-handler memory for the duration of that one request and is never written to a database, log file, or any other store.

The server keeps short-lived in-process counters of recent request IPs and key hashes for rate limiting. Standard infrastructure access logs (IP address, user agent, timestamp) may also be retained briefly by our deployment host.

No analytics, no tracking. The extension itself does not load any analytics or third-party scripts and does not transmit any usage data. There are no advertising IDs, cross-site trackers, or remarketing pixels.

What we do not collect. No name, email address, phone number, or precise location. No browsing history. No contents of your posts or any X account information. No user accounts and nothing for you to sign up for.

Information you publish on the blockchain when purchasing. If you purchase a premium key on xchedule.xyz/checkout or rotate one on xchedule.xyz/rotate, you connect a Web3 wallet, sign a transaction, and the keccak256 hash of your license key plus your wallet address become part of the public Base blockchain. The plaintext key is not on-chain. Blockchain records are public and permanent.

Data retention.

On your device and on browser sync: kept until you uninstall the extension or clear its storage.
On our server: plaintext license keys are held only in process memory for the duration of one HTTP request. Access logs and rate-limiter counters are kept briefly for abuse prevention.
On the Base blockchain: permanent, by design.
Children's privacy. Xchedule is not directed at children under 13 and we do not knowingly collect any information from children.

International users. The same policy applies regardless of where you are. Because we do not maintain user accounts or personal-data records, rights provided by laws such as GDPR and the CCPA (access, rectification, erasure) are satisfied by the local-deletion path: uninstalling the extension or clearing its storage removes everything we hold about you.

Changes to this policy. If we change this policy, we will update the effective date above. Substantive changes will also be noted in the next extension update.

Contact. Questions about this policy: support@xchedule.xyz

The full version of this policy is also available at https://xchedule.xyz/privacy.