Privacy policy
Last updated: January 2026
yapmaxxer ("we", "the service") is a Chrome extension and web studio that drafts replies on X (Twitter) and Threads in your voice. This policy covers what we collect, why, and what we never touch.
What we collect
- Email address — used for magic-link sign-in. Stored in our database whether or not you complete sign-in (so we can reach you about the product).
- Post content you act on — when you draft a reply (or autopilot evaluates a post), that post's text and a screenshot of it are sent to our backend for AI processing. Posts you simply scroll past are never sent.
- Voice samples — posts you paste into the extension's options to train your reply voice.
- Activity data — replies drafted and sent, your public follower/following counts, and per-reply engagement metrics (likes, replies, views) read from your own public profile.
- Settings — your topics, goals, push context, and autopilot preferences.
What we never collect
- Your X or Threads password or session credentials — the extension works inside your already-logged-in browser session; we never see or store tokens.
- Your DMs — we don't read, send, or store direct messages.
- Browsing history outside the pages the extension runs on.
- Your payment card details — checkout is handled entirely by Stripe; we only learn that a payment succeeded.
How we use it
- Drafting replies that match your voice and goals.
- Scoring which posts are worth replying to (autopilot).
- Learning which reply styles earn engagement for you, to draft better ones.
- Showing your growth analytics in the Studio dashboard.
- Sending sign-in links and product updates by email.
Third-party processors
- Cloudflare — hosts our backend and runs the AI models (Workers AI). Post text and screenshots are processed there.
- Resend — delivers sign-in and notification emails.
- Stripe — processes subscription payments.
We do not sell your data to anyone. We do not share it with advertisers.
Retention & deletion
Account data is kept while your account is active. To delete your account and all associated data (voice profile, events, analytics), email support@yapmaxxer.wtf from your sign-in address and we'll wipe it.
Extension permissions
The extension requests access to x.com, threads.net, and yapmaxxer.wtf so it can read posts, draft replies, and sync with your studio. Optional permissions (a custom agent URL) are only requested if you configure them.
Changes
If this policy changes materially we'll note it here and, where practical, email active accounts.