Privacy policy
Export X Bookmarks is a browser extension. It keeps a copy of your X bookmarks in your browser so you can search and export them. This page says what it reads, what it stores, and what leaves your device. The short version: your bookmarks stay in your browser.
What the extension reads
- Your X bookmarks. The extension asks x.com for your bookmarks with the session you are already logged in with, the same way x.com does when you open your bookmarks page.
- Connection details from x.com. When x.com sends a request to its own API, the extension notes the request's address and a few headers (the public web token, the request ID for the bookmarks list, and its settings). It also reads the
ct0cookie, which X requires on every request, and checks that theauth_tokencookie exists. These stay in your browser and are used only to read your bookmarks.
The extension reads nothing until you press Start import on the first-run screen.
What stays on your device
Every bookmarked post, its text, author, media links, quoted post and X's raw data for it are stored in your browser's IndexedDB. Import progress and settings are stored in the extension's local storage. None of this is sent to us. Uninstalling the extension deletes it.
What leaves your device
| What | When | Sent to |
|---|---|---|
| Requests for your bookmarks, with your X session | During an import and every 30 minutes after | x.com only |
| A request for the current import settings (the "recipe"). It carries nothing about you. | Twice a day | Our server |
| One anonymous import result: whether the count matched, the count, X's total if known, the outcome, the extension and recipe version. No handle, no user ID, no post, no install ID. | Once at the end of each full import | Our server |
| Your email address, if you type it into the digest or Founding Pro form | Only when you submit it | Our server |
Our server runs on Cloudflare. Like any web server, Cloudflare sees the IP address of each request. We do not store IP addresses with import results or emails.
If you leave your email, we store it with the date and the extension version. We use it to tell you when the digest and Founding Pro features ship, and for nothing else. Every email has an unsubscribe link. To delete your email from our list, write to the address below.
What we never do
- We never send your X session, cookies or tokens anywhere.
- We never post, like, follow or change anything on your X account.
- We never sell or share data, and never use it for advertising or credit decisions.
- We never run code downloaded from the internet. The recipe is plain settings, signed by us and checked before use.
Limited Use
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. Export X Bookmarks uses data only to provide its single purpose: importing, searching and exporting your X bookmarks.
Changes and contact
If this policy changes, the new version will be on this page with a new date, and the extension will show the change before it applies. Questions or deletion requests: @SaaSNoCap on X.