1. Introduction & Single Purpose

This Privacy Policy explains how X Fair Play – AI Reply & Follow Manager ("Extension", "we", "us", or "our") handles user information when you install and use our Chrome browser extension.

The single core purpose of the Extension is to provide a productivity enhancement toolkit for users on X (formerly Twitter) to:

• Manage Following & Follower Lists: Organize your network by identifying non-mutual followings, whitelisting VIP accounts, and safely executing user-directed batch follow/unfollow operations directly on the official X web interface.
• Draft Contextual AI Replies: Provide an inline writing assistant directly below tweets on X, allowing users to generate natural, context-aware reply suggestions using their own personal AI API keys (Google Gemini, OpenAI, Anthropic Claude, xAI Grok, Groq, or OpenRouter).

2. Data Collection, Storage, and Processing Architecture

A. 100% Client-Side Follow Management

• No Credentials Collected: The extension operates entirely within your existing active session on x.com. It never requests, stores, or transmits your account password, email, or authentication tokens.
• Local Storage Only: All user configurations (custom whitelist handles, daily action limits, task delays, UI language, and action logs) are stored strictly locally on your machine using Chrome's built-in chrome.storage.local API.

B. AI Reply Generation & Direct Provider API Calls

• User-Provided API Keys: Users input their own API key for their chosen AI provider. These keys are stored strictly in chrome.storage.local on the user's computer. They are NEVER sent to the developer or any unauthorized server.
• Direct HTTPS Communication: When you click an AI reply button, the text of that specific tweet and your selected persona instructions are sent directly and encrypted over HTTPS from your browser to your selected AI provider's official API endpoint (e.g. generativelanguage.googleapis.com or api.openai.com).
• Zero Intermediary Logging: The extension has no developer backend or middleman proxy. The generated reply text is returned directly to your browser and placed into Twitter's composer for your review before you post.
• No Data Retention or Training: The developer does not collect, log, store, or train models on your tweets, prompts, or generated replies.

C. No Analytics or Third-Party Tracking

We do not use Google Analytics, telemetry scripts, ad networks, tracking pixels, or third-party cookies.

3. Chrome Permissions Used & Justifications

In accordance with Chrome Web Store Developer Policies, the Extension requests only the minimum required permissions necessary to execute its declared core functionality:

Permission	Purpose & Strict Justification
storage	Required to store user settings, custom whitelist handles, delay preferences, UI language, and user-provided AI API keys locally on your device via chrome.storage.local.
sidePanel	Allows the extension to open in Chrome's native Side Panel alongside your active X browsing tab for a seamless multitasking experience.
notifications	Sends desktop notifications to alert you when a follow/unfollow batch action completes or when a rate-limit cooldown timer has finished.
tabs	Enables the extension to detect if an active X (x.com) tab is already open and navigate to the relevant following/follower list when you initiate a scan.
alarms	Schedules background countdown timers (such as the 40-minute rate-limit cooldown) via chrome.alarms, ensuring the timer continues accurately even if the extension popup is closed.

4. Host Permissions & Justifications

The extension requests host permissions strictly for the domains necessary to interact with X and communicate directly with user-selected AI services:

Host Domain	Purpose & Strict Justification
https://x.com/* https://twitter.com/*	Required to inject the AI reply toolbar into tweets and execute user-directed follow/unfollow actions on profile pages.
https://generativelanguage.googleapis.com/*	Allows direct browser-to-API requests to Google Gemini when the user configures a Gemini API key to generate reply suggestions.
https://api.openai.com/*	Allows direct browser-to-API requests to OpenAI when the user configures an OpenAI API key to generate reply suggestions.
https://api.x.ai/*	Allows direct browser-to-API requests to xAI Grok when the user configures an xAI API key to generate reply suggestions.
https://api.anthropic.com/*	Allows direct browser-to-API requests to Anthropic Claude when the user configures a Claude API key to generate reply suggestions.
https://api.groq.com/*	Allows direct browser-to-API requests to Groq Cloud when the user configures a Groq API key to generate reply suggestions.
https://openrouter.ai/*	Allows direct browser-to-API requests to OpenRouter when the user configures an OpenRouter API key to generate reply suggestions.

5. Remote Code Policy Compliance

In compliance with Chrome Web Store Manifest V3 requirements:

• No Remote Code: The extension does NOT execute remotely hosted scripts, styles, or eval.
• All application code is completely self-contained within the extension package installed from the Chrome Web Store.

6. Data Security and Third-Party Disclosure

• We do NOT sell, trade, rent, or transfer any user data to third parties.
• We do NOT use or transfer user data for purposes unrelated to the core functionality of the extension.
• We do NOT use or transfer user data to determine creditworthiness or for lending purposes.
• All network requests to external AI APIs are encrypted via TLS/HTTPS.

7. User Control & Data Deletion

You maintain full control over your data at all times:

• You can clear all stored logs, whitelists, and API keys at any time directly through the extension's Settings menu.
• Uninstalling the Extension from Chrome immediately and permanently removes all locally stored extension data from your device.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect modifications in browser policies or extension enhancements. Any updates will be posted with an updated "Last Updated" date.

9. Contact & Support

If you have any questions, concerns, or feedback regarding this Privacy Policy, please contact:

• Developer: Fairplay Labs
• Support Email: fairplaylabs.team@gmail.com