X-Reply Guy
X-Reply Guy is a Chrome extension that helps you draft replies on X (Twitter) using AI providers you configure. This policy explains what data the extension and our backend collect, why, and how you can control it.
1. What we collect
- Email (Pro purchasers only): If you buy Pro via Polar.sh, we store the email you provide to verify your purchase, send one-time activation codes (OTP), and validate Pro status across devices.
- Device identifier (Pro activation only): A local device ID is sent to our backend only when you start checkout, activate Pro after payment, or verify Pro via email OTP — so we can bind the license to your device(s).
- Pro purchase metadata: Purchase date, price paid, Polar.sh order ID, and license status (active/refunded).
- API keys & settings: Stored locally on your device only (Chrome storage). Never sent to our servers.
- Reply history, dislikes, and daily generate/post stats: Stored locally on your device only. Never synced to our servers.
- Tweet content you reply to: Read from the X page and sent directly to your chosen AI provider (OpenAI, Anthropic, Gemini, DeepSeek, OpenRouter, etc.) to generate replies. We do not store tweet text on our servers.
2. How data is used
- Activate and verify Pro licenses (checkout, email OTP, multi-device, JWT session).
- Process Polar.sh payment webhooks and handle refunds.
- Generate AI replies through providers you select with your own API keys.
3. Third-party services
- AI providers (user-configured): OpenAI, Anthropic, Google Gemini, DeepSeek, OpenRouter, and optional custom endpoints.
- Firebase (Google): Authentication and Cloud Functions used for Pro activation and verification.
- Polar.sh: Payment processing for Pro purchases.
- Resend (or equivalent): Transactional email for Pro OTP codes.
We do not sell your data. We do not use your data for advertising.
4. Data retention & deletion
- Local extension data is removed when you uninstall the extension or clear extension storage.
- OTP sessions expire after 10 minutes.
- To request deletion of Pro purchase records tied to your email, contact xreplyguy@mozuno.web.id.
5. Security
All communication with our backend and AI providers uses HTTPS. Pro activation uses email OTP verification. OTP codes are stored hashed on our servers.
6. Children
X-Reply Guy is not directed at children under 13, and we do not knowingly collect personal information from children.
7. Changes
We may update this policy. The “Last updated” date below will change when we do.
8. Contact
Operator: X-Reply Guy (sole proprietor)
Questions about privacy: xreplyguy@mozuno.web.id
Last updated: July 12, 2026