Privacy Policy

1. Introduction

This Privacy Policy explains how 𝕏 (Twitter) Auto Reply & Post Creator No API ("the Extension", "we", "our") handles your data when using the extension on Twitter/𝕏 (x.com and twitter.com) and Google Gemini (gemini.google.com).

We strongly value digital privacy and believe productivity tools should work for you without turning your personal workflow into commercial telemetry.

2. Data Processing Architecture

The Extension operates exclusively within your local Chrome browser sandbox using three available AI engine architectures:

• Option 1 — Gemini Nano (On-Device AI): When enabled, inference is performed 100% locally on your computer's GPU or NPU via Chrome's built-in Prompt API (window.ai). Zero data is transmitted over the internet; everything remains on your local hardware.
• Option 2 — Headless Direct (Google Cookie Session): When you click "AI Reply", the text of the selected tweet is sent directly from your browser to Google Gemini's endpoint using your active Google login session cookies. No intermediary server is used.
• Option 3 — Web Tab Automation: Operates an automated tab on gemini.google.com/app. An optional auto-close setting ensures temporary tabs are closed immediately once the response is inserted.

3. Information We Do NOT Collect

Unlike many browser extensions, we do NOT collect or store:

• No personal identity information (name, email, IP address, Google account credentials).
• No Twitter account credentials, auth tokens, passwords, or direct messages.
• No tweet history, browsing history, read feed logs, or keystrokes.
• No analytics or telemetry (no Google Analytics, Mixpanel, PostHog, or tracking beacons).

4. Local Data Storage

The Extension utilizes Chrome's native local storage API (chrome.storage.local) strictly to remember your preferences between sessions:

• Your preferred AI engine choice (Gemini Nano, Headless Direct, or Web Tab).
• Your selected default reply tone (e.g. Quick, Thoughtful, Witty).
• Your custom prompt instructions (such as language preference or character limits).
• UI preferences (such as auto-close tab toggle).

This data is saved strictly on your local computer and is never synced to external servers or accessible to third parties.

5. Chrome Web Store & Manifest V3 Permissions

In accordance with Google Chrome Web Store policies, every permission requested in manifest.json has a specific, narrow purpose:

• storage: Required to save your settings and prompt rules locally.
• tabs & scripting: Required to inject the "✦ AI Reply" button into Twitter/𝕏 tabs and manage the Gemini generation tab.
• offscreen: Required by Chrome Manifest V3 to execute clipboard and DOM bridge operations without intrusive windows.
• declarativeNetRequest: Allows the Headless Direct engine to attach your existing Google session credentials to background Gemini requests.
• host_permissions (twitter.com, x.com, gemini.google.com): Strictly scoped to the platforms where the extension operates.

6. Third-Party Services

The extension communicates solely between your browser and two trusted platforms:

• X (Twitter): Governed by X's Privacy Policy.
• Google Gemini: Governed by Google's Privacy Policy and Gemini Terms of Service.

7. Open Source & Independent Verification

This project is completely open source under the MIT License. The entire source code is publicly accessible on GitHub:

github.com/gomedz/twitter-auto-reply

Any developer or security researcher can inspect every line of code, verify network requests in Chrome DevTools, or install the extension directly from source.

8. Contact & Questions

If you have any questions or feedback regarding this Privacy Policy or the security of the extension, please open an issue on GitHub:

Report an Issue or Ask on GitHub