The Plain English Summary (TL;DR)
𝕏 (Twitter) AI Assistant: Auto Reply & Post Creator is 100% client-side. We do not operate external proxy servers, databases, or tracking telemetry. We never see, collect, store, or sell your private tweets, passwords, or personal data. All requests execute directly between your browser and official Google Gemini endpoints, or locally on your machine via Gemini Nano.
1. Introduction
This Privacy Policy explains how 𝕏 (Twitter) AI Assistant: Auto Reply & Post Creator ("the Extension", "we", "our") handles your data when using the extension on Twitter/𝕏 (x.com and twitter.com) and Google Gemini (gemini.google.com / generativelanguage.googleapis.com).
We strongly value digital privacy and believe productivity tools should work for you without turning your personal workflow into commercial telemetry.
2. Data Processing Architecture
The Extension operates exclusively within your local Chrome browser sandbox using four available AI engine architectures:
- Option 1 — Google Gemini Cloud API (Official REST Integration): Communicates directly with Google's official Generative Language REST API (generativelanguage.googleapis.com). Your free API key from Google AI Studio is stored strictly on your local device in chrome.storage.local. Zero middleman servers or third-party relays are used.
- Option 2 — Gemini Nano (On-Device AI): When enabled, inference is performed 100% locally on your computer's GPU or NPU via Chrome's built-in Prompt API (window.ai / LanguageModel). Zero data is transmitted over the internet; everything remains on your local hardware and functions offline.
- Option 3 — Headless Direct (Google Cookie Session): Sends background requests directly from your browser to Google Gemini using your active Google login session cookies without requiring an API key. No intermediary server is used.
- Option 4 — Web Tab Automation: Operates an automated tab on gemini.google.com/app. An optional auto-close setting ensures temporary tabs are closed immediately once the response is inserted.
3. Information We Do NOT Collect
Unlike many browser extensions, we do NOT collect or store:
- No personal identity information (name, email, IP address, Google account credentials).
- No Twitter account credentials, auth tokens, passwords, or direct messages.
- No tweet history, browsing history, read feed logs, or keystrokes.
- No analytics or telemetry (no Google Analytics, Mixpanel, PostHog, or tracking beacons).
4. Local Data Storage
The Extension utilizes Chrome's native local storage API (chrome.storage.local) strictly to remember your preferences between sessions:
- Your preferred AI engine choice (Cloud API, Gemini Nano, Headless Direct, or Web Tab).
- Your Google AI Studio API key (stored strictly in local storage, never transmitted anywhere except Google's official endpoint).
- Your selected Cloud API model version (e.g. gemini-3.1-flash-lite, gemini-2.5-flash, etc.).
- Your selected default reply tone and default standalone post style.
- Your custom prompt instructions (such as language preference or character limits).
- UI preferences (such as Floating HUD visibility toggle and auto-close tab toggle).
This data is saved strictly on your local computer and is never synced to external servers or accessible to third parties.
5. Chrome Web Store & Manifest V3 Permissions
In accordance with Google Chrome Web Store policies, every permission requested in manifest.json has a specific, narrow purpose:
- storage: Required to save your settings, API key, and prompt rules locally.
- tabs & scripting: Required to inject AI Reply and Post buttons into Twitter/𝕏 tabs and manage the Gemini generation tab.
- offscreen: Required by Chrome Manifest V3 to execute clipboard and Gemini Nano Prompt API operations cleanly from the Service Worker.
- declarativeNetRequest: Allows the Headless Direct engine to attach your existing Google session credentials to background Gemini requests.
- host_permissions: Strictly scoped to twitter.com, x.com, gemini.google.com, and generativelanguage.googleapis.com (Google's official Generative Language API endpoint).
6. Third-Party Services
The extension communicates solely between your browser and two trusted platforms:
- X (Twitter): Governed by X's Privacy Policy.
- Google Gemini: Governed by Google's Privacy Policy and Google AI Studio Terms of Service.
7. Open Source & Independent Verification
This project is completely open source under the MIT License. The entire source code is publicly accessible on GitHub:
github.com/gomedz/twitter-auto-reply
Any developer or security researcher can inspect every line of code, verify network requests in Chrome DevTools, or install the extension directly from source.
8. Contact & Questions
If you have any questions or feedback regarding this Privacy Policy or the security of the extension, please open an issue on GitHub: