LEGAL / PRIVACY

Privacy Policy

Last updated: August 6, 2026 · Applies to the X-Vault Chrome extension and https://x-vault.app

1. Overview

X-Vault (“we”, “us”) provides a Chrome extension that helps you download media from Twitter/X posts, plus a website for licensing. We design the product to keep your browsing and download activity on your device whenever possible.

2. Chrome extension — data we do not collect

The X-Vault browser extension does not collect, transmit, sell, or share:

Personal identity information
Twitter/X login credentials or session cookies
Your browsing history outside the pages where the extension is active
Download contents or media files to our servers
Advertising identifiers or analytics from the extension itself

3. What the extension stores locally

With your use of the extension, the following may be stored in Chrome’s local storage on your computer only:

Download preferences (filename template, subfolder options, quality preference)
Install timestamp used for the 7-day free trial
Pro license key if you activate one
A local index of downloaded items (tweet IDs, authors, types, dates) so you can reopen source posts

This data stays on your device. Uninstalling the extension or clearing extension storage removes it.

4. Network requests made by the extension

To recover media URLs, the extension may request:

Twitter/X pages you already have open (twitter.com / x.com)
Twitter’s public Syndication API at cdn.syndication.twimg.com as a fallback when GraphQL media data is unavailable

Media files are saved through Chrome’s built-in download system to your computer. We do not proxy those files through X-Vault servers.

5. Website & license purchases (x-vault.app)

If you buy a Pro license or key resend on our website:

Payments are processed by Stripe. We do not store full card numbers.
Email you provide at checkout is used to deliver your license key (via Resend) and for purchase-related support.
License records (email, license key, recovery token, Stripe session IDs) are stored in our database so we can fulfill and recover purchases.

The marketing site may use Google Analytics to understand aggregate traffic. Analytics cookies are not part of the Chrome extension.

6. Permissions

The extension requests only the permissions needed for its single purpose:

storage — local settings, trial, license, download history
downloads — save media files via Chrome downloads
Host access to Twitter/X and Syndication — inject UI and recover media URLs

7. Children’s privacy

X-Vault is not directed at children under 13. We do not knowingly collect personal information from children.

8. Changes

We may update this policy. The “Last updated” date at the top will change when we do. Continued use after updates constitutes acceptance of the revised policy.

9. Contact

Questions about privacy or licenses: hello@x-vault.app