Last updated: July 22, 2026
This Privacy Policy explains how Xhancer ("Xhancer," "we," "us," or "our") handles information when you use the Xhancer browser extension, xhancer.com, and related account, payment, public-post viewing, download, analytics, and AI features (collectively, the "Service").
Xhancer is a local-first browser extension for enhancing the X/Twitter web experience. Most workspace data created by the extension stays in your browser. Some features, such as account authentication, Premium verification, payments, website analytics, and server-assisted AI, require data to be sent to us or to third-party providers. This Policy describes those differences.
Xhancer is an independent product and is not affiliated with, endorsed by, or sponsored by X Corp.
The extension uses browser extension storage and IndexedDB to keep product data on your device. Depending on which features you use, local data may include:
This local workspace data is not automatically uploaded to an Xhancer database. The extension may read content available in your current X session and call X endpoints using your browser session to provide sync, search, analysis, and interface-enhancement features. Those requests are sent to X, not to Xhancer, unless a feature expressly uses an Xhancer endpoint as described below.
You can manage individual records in the extension, export supported data, import a backup, and clear supported local data from the extension interface. Uninstalling the extension normally removes its extension storage, subject to your browser's behavior and any backups or exported files you retain.
If you create or use an account, we may process:
Email verification messages are delivered through an email service provider. Social-login providers separately process your information under their own terms and privacy policies.
When you purchase Premium, Stripe processes the checkout and payment method details. We may receive and store information such as:
We do not directly receive or store your full card number or full payment-account credentials. Stripe may collect those details directly under the Stripe Privacy Policy.
When you run a custom Xhancer AI agent, the extension sends the assembled prompt to Xhancer. Depending on your agent configuration and action, the prompt may include:
We forward that prompt to DeepSeek to generate a response and return the result to your browser. Xhancer does not currently save these prompts or responses in its application database, but they are processed in transit and may appear in temporary infrastructure or security logs. DeepSeek may process or retain them under its own Privacy Policy. Do not submit confidential, sensitive, or third-party personal information that you are not authorized to disclose.
Some account-analysis features use Grok through your existing X session. In that case, the prompt is sent directly from your browser to X/Grok and is governed by the X Privacy Policy. Saved analysis reports remain local unless you export or otherwise share them.
If you submit an X post URL to the website viewer or downloader, the URL is sent to Xhancer so we can request public embed data from X and return the post text, author information, and available media references. We do not currently store submitted post URLs or returned post content in the application database. Our hosting provider and X may nevertheless process request data and logs.
If you contact us, we process the contact details and message content you provide so we can respond, troubleshoot, and maintain a record of the request when reasonably necessary.
We use analytics to understand whether the Service works, which features are used, and where users encounter errors.
The website and extension may send Google Analytics information such as:
Extension analytics events are designed to describe product usage and do not intentionally include the contents of your remarks, archived posts, bookmarks, agent memories, or AI prompts. Google describes its data practices and controls in the Google Privacy Policy.
The website may use Microsoft Clarity to understand website interaction and diagnose usability problems. Clarity can collect clicks, scrolling, pointer movement, navigation, page rendering, device and browser details, and session-replay information. Microsoft describes this processing in the Microsoft Privacy Statement.
The website may display advertising through Google AdSense. Google and its partners may use cookies, device identifiers, page activity, and ad interactions to deliver, limit, personalize where permitted, and measure advertising. Available choices depend on your region, consent selections, browser settings, and Google settings.
The website uses cookies, local storage, and similar technologies for:
You can control cookies through your browser and, where provided, our consent controls. Blocking essential cookies may prevent login or other account features from working. You can also use privacy controls made available by Google, Microsoft, and other providers.
We use information to:
Where applicable law requires a legal basis, we rely on performance of our contract with you, our legitimate interests in operating and securing the Service, compliance with legal obligations, and consent where required, including for certain cookies, analytics, advertising, or marketing activities.
We may disclose information to:
We do not sell personal information for money. Our use of advertising and analytics providers may be treated as a "sale," "sharing," or targeted advertising under some privacy laws. Where those laws apply, you may have the right to opt out.
Third-party providers process information under their own contracts, settings, and privacy policies. Cloudflare's practices are described in its Privacy Policy.
We retain information only for as long as reasonably needed for the purposes described in this Policy:
Backup copies may persist for a limited period after deletion. We may retain information longer when required by law, to resolve disputes, or to enforce agreements.
We use reasonable administrative and technical measures designed to protect information, including transport encryption, hashed account passwords, access controls, and managed infrastructure. No service or storage system is completely secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur.
You are responsible for protecting your account, browser profile, exported files, and device. Contact us promptly if you believe your Xhancer account has been compromised.
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information, withdraw consent, or opt out of certain advertising-related disclosures. You may also have the right to appeal a decision or complain to a privacy regulator.
You can take several actions directly:
To request access, correction, account deletion, or another privacy action that is not available in the product, email support@xhancer.com. We may need to verify your identity and may retain information where permitted or required by law.
Xhancer and its providers may process information in countries other than the one where you live. Those countries may have different data-protection laws. Where required, the relevant parties use legally recognized safeguards for international transfers.
The Service is not directed to children under 13. You must also meet any higher minimum age required in your country to consent to online services or data processing. We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information improperly, contact us so we can investigate and take appropriate action.
We may update this Policy as the Service, providers, or legal requirements change. We will post the updated version here and revise the "Last updated" date. If a change materially affects how we use personal information, we will provide additional notice when reasonably required.
For privacy questions or requests, contact:
