Privacy policy: X-Cleanup
Last updated: 17 May 2026
This policy describes how the X-Cleanup Chrome extension (“the Extension”), published by FatherXLdn (“we”, “us”), handles your information. If anything here is unclear, contact us at hello@fatherxldn.co.uk.
Summary
X-Cleanup helps you bulk delete tweets, remove likes, clear bookmarks, and unfollow accounts on x.com. Core cleanup features (delete, unlike, unfollow, bookmark management) work entirely within your browser and send no data to us. The optional Pro classification feature sends your tweet text to our server so we can classify it using Claude AI on your behalf. Pro requires a paid subscription handled by Stripe.
Information the Extension handles
X.com bearer token and session data
To act on x.com on your behalf, the Extension captures your x.com session bearer token by intercepting your browser's own requests to x.com. This token is stored locally in chrome.storage.local on your device. It is used only to make requests to x.com's API — exactly as your browser already does when you are logged in — and is never sent to any server we operate.
Your tweet, like, bookmark, and following data (free features)
When you fetch or upload data (for example, uploading your Twitter archive or fetching your following list), that data is stored temporarily in chrome.storage.local so it persists across popup sessions. It never leaves your browser except when the Extension uses it to make deletion or unfollow requests directly to x.com on your behalf. It is cleared when you press Clear or remove the Extension.
Pro classification — tweet text sent to our server
If you subscribe to X-Cleanup Pro and use the “Classify with Claude” feature, your tweet text and your brand persona description are sent to our classification server (hosted on Cloudflare Workers at x-cleanup-classify.fatherxldn.workers.dev). Our server passes this content to Anthropic's Claude API to generate keep / delete / review verdicts. We do not store your tweet text after classification is complete; Anthropic processes it under their own privacy policy.
Classification is triggered only when you explicitly click the Classify button. It is entirely optional.
Pro account and usage data
When you purchase a Pro subscription, Stripe processes your payment and shares your email address and a Stripe customer identifier with us. We store these in our database (Supabase, hosted in the EU) along with a monthly usage counter so we can enforce the plan's classification limit. We do not store payment card details; those remain with Stripe.
Pro key and session security
Your Pro key is a signed token stored in chrome.storage.local on your device. When you use the classify feature, your IP address is used to verify that the token is being used from the same session it was issued to. IP addresses are not logged or stored beyond what Cloudflare retains in its standard infrastructure logs.
Brand persona
If you enter a brand persona in settings to guide classification, that text is stored in chrome.storage.local and included in Pro classification requests sent to our server. It is not used for any other purpose.
What we do not collect
We do not collect analytics, crash reports, or telemetry from the Extension. We do not track which accounts you clean up, which tweets you delete, or how you interact with x.com. Free feature usage leaves no trace on our systems.
Third-party services
The Extension communicates with: x.com (to perform actions you request); our Cloudflare Workers backend (for Pro classification requests); and Anthropic (Claude AI, via our server, for Pro users). Payment is handled by Stripe. Our database runs on Supabase (EU region).
Data retention
Local extension data (bearer token, tweet cache, persona) is retained on your device until you clear it or uninstall the Extension. Pro account records (email, Stripe customer ID, usage counts) are retained for as long as your subscription is active and for a reasonable period thereafter for billing and legal purposes. You can request deletion by contacting us.
Your rights (UK / EEA)
For free features, we do not act as a data controller because no personal data is transmitted to us. For Pro users, we are the controller of your account and usage data. You have the right to access, correct, or request deletion of that data. Contact us at hello@fatherxldn.co.uk to exercise these rights. Questions about data held by x.com are handled through your X account settings.
Children
The Extension is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has subscribed, contact us and we will delete the account.
Security
Local data is kept in your browser's isolated extension storage, inaccessible to other extensions and web pages. Pro communications use HTTPS. Pro keys are signed tokens; they are not passwords and cannot be used to access your X account. Use the Extension only on devices you trust.
Changes
We will update this policy if features change how data is handled, and revise the “Last updated” date when we do. Continued use after changes constitutes acceptance unless applicable law requires otherwise.
Contact
Questions about this policy: hello@fatherxldn.co.uk.
