Effective Date: August 18, 2025

Welcome to x-graphs, a browser extension provided by Curlysoft, LLC ("Curlysoft," "we," "us," or "our"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our x-graphs browser extension (the "Extension").

Please read this Privacy Policy carefully. By installing and using the Extension, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect
   Our Extension is designed to analyze and display social relationship data from the X.com platform (formerly Twitter). To provide this service, we need to collect specific information.

A. Information Collected Automatically via the Extension:

When you use the Extension while logged into X.com, we collect the following data by leveraging your authenticated session:

X.com Authentication Data: The Extension reads and securely stores your X.com session headers (such as authorization, x-csrf-token, and twid cookie) locally in your browser's storage. These are used to make authenticated requests to the X.com API on your behalf to gather data. The twid cookie is also sent to our servers to authenticate your requests with our backend.
X.com API Endpoints: The Extension intercepts and records the specific API paths used by your browser to communicate with X.com. This information is sent to our servers to keep our service functional as X.com updates its platform.
Your Public and Private X.com Data:
Notifications: We periodically fetch your notifications from X.com, including likes, replies, and mentions. This data, including the content of the tweets and the users involved, is sent to our servers for processing.
Tweets and Replies: We collect tweets and replies from your timeline and notifications to build relationship graphs.
Profile Information: We collect your public X.com profile information (name, username, user ID, profile picture) to associate your collected data with your account.
Other Users' Data: When you browse X.com, the Extension collects public data about other users and their tweets that are necessary to provide the relationship statistics. This includes user profiles, tweet content, and engagement data (likes, replies, reposts, quotes).
Technical & Browsing Data:
Navigator Properties: We collect your browser's User-Agent string to help make valid API requests.
Rate Limit Status: We monitor the X.com API rate limits on your account to manage data collection responsibly.
B. Information Processed on Behalf of the Network:

The x-graphs service operates as a distributed data collection network. Our servers may send tasks to your Extension to collect public data from X.com using your authenticated session. This includes:

Fetching the "favoriters" (likers) of a specific tweet.
Fetching the "reposters" of a specific tweet.
Fetching the replies to a specific tweet.
Fetching the quote tweets of a specific tweet.
This collective effort allows us to build the comprehensive dataset required to show relationship statistics to all users. All data collected in this manner is public information available on the X.com platform.

1. How We Use Your Information
   We use the collected information for the following purposes:

To Provide and Maintain the Service: To display relationship statistics (replies sent/received, likes received, etc.) between you and other users directly on the X.com interface.
To Power the x-graphs Database: To ingest, process, and analyze social interaction data to build our central graph database, which is the core of our service.
To Authenticate You: To verify your identity with our backend services using your twid cookie.
To Improve and Update the Service: To monitor changes to the X.com API and ensure the Extension remains functional.
To Manage Network Load: To use your Extension as a node in our distributed network to collect public data, managed by our queue system.
3. How We Share Your Information
We do not sell your personal information. We may share information under the following circumstances:

With Our Service Providers: We may share data with third-party vendors and service providers that perform services for us (e.g., cloud hosting, database management). These providers are contractually obligated to protect your data.
For Legal Reasons: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company, your information may be transferred.
The core data displayed by the extension (e.g., "This user has replied to you 5 times") is derived from our central database and shown to other x-graphs users. This information is an aggregated summary of public interactions on X.com.

1. Data Security and Storage
   Local Storage: Sensitive information like your X.com authentication headers is stored in your browser's local storage to persist your session with our service.
   Data Transmission: Data sent from the Extension to our servers is compressed (gzipped) and transmitted over encrypted HTTPS connections.
   Server Security: We implement industry-standard security measures on our servers to protect the database from unauthorized access.
   However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.
2. Data Retention
   We retain the data we collect for as long as necessary to provide the x-graphs service and for legitimate business purposes. When you uninstall the Extension, we will no longer collect new data from you. You may contact us at x-graphs@protonmail.com to request the deletion of your account-related data from our systems.
3. Children's Privacy
   Our service is not intended for use by anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13.
4. Changes to This Privacy Policy
   We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on our website. You are advised to review this Privacy Policy periodically for any changes.
5. Contact Us
   If you have any questions about this Privacy Policy, please contact us:

Curlysoft, LLC
Email: x-graphs@protonmail.com
Website: x-graphs.com