Privacy Policy

Effective 26 September 2026

X Orbit is a website at xorbit.ashutosh-siddh.com. It does its work inside your browser. There are no accounts, no cookies, no analytics and no ads. This policy explains what data X Orbit handles, where it goes, and how to delete it.

1. What X Orbit reads

X Orbit reads only public information from X, through FxTwitter:

• Followers: the public profile, follower list and following list of a handle you enter.
• Rally: recent public posts and replies by a handle you enter, public conversations around them, and who publicly reposted them.

It never reads private accounts, likes, bookmarks or direct messages. It never asks for your X password.

2. Where your data is stored

• Follower snapshots: each "Sync followers" saves the follower and following lists, plus a log of who left, in your browser's storage (IndexedDB). They're never sent to X Orbit's servers, and they stay until you clear this site's data.
• Rally boards: built in your browser tab and kept in memory only. Closing the tab discards them.
• Browser storage: your browser's local storage keeps the last handle you used, the people you removed from a Rally board, and your Guess streak. It never leaves your browser.
• PNG cards: drawn in your browser. Downloading one stores nothing anywhere.

3. Share links

A share link is only created when you press "Share link". It stores:

• usernames and display names,
• profile photo URLs,
• scores and the date range they cover,
• board settings: sort order and people you removed.

It doesn't store post text, follower lists or anything else. Share links are stored with our database provider and deleted automatically after 30 days. Anyone with the link can view it until then. The latest share for a handle is also used to show Drift, meaning who moved since last time.

To stop spam, each visitor can create 20 share links an hour. That limit is counted against a one-way hash of your IP address, never the address itself, and the counter is deleted after an hour.

4. Third parties

• FxTwitter (api.fxtwitter.com) receives the handles and post IDs X Orbit looks up, and, like any website, your IP address. Rally requests go straight from your browser to FxTwitter. See FxTwitter's own policies.
• X's image servers (pbs.twimg.com) serve profile photos to your browser.
• Vercel hosts the website. Like any web host, it processes your IP address and basic request details to deliver pages, and may keep short-lived server logs.
• Upstash stores share links, and nothing else, for up to 30 days.
• Buy Me a Coffee: the "Buy me a coffee" button is a plain link. No Buy Me a Coffee code runs on X Orbit. If you click it, you leave for buymeacoffee.com, and their privacy policy applies there.

X Orbit doesn't sell, rent or share data with anyone else.

5. Other people's data

X Orbit shows public information about other X users: names, handles, photos and public interactions. Use it respectfully and within the Terms. If you appear in someone's share link and want it removed, ask the person who shared it, or contact us below. Links expire on their own after 30 days.

6. Deleting your data

• Follower snapshots, removed people and your Guess streak: clear this site's data in your browser settings.
• Share links: they delete themselves after 30 days. To remove one sooner, contact us with the link.

7. Children

X Orbit isn't meant for anyone under the minimum age required to use X.

8. Changes

This policy may be updated. The effective date at the top shows the latest version.

9. Contact

Privacy questions or removal requests: github.com/siddhashutosh.