This Gist contains the full Privacy Policy for TweetSanitizer, a Chrome extension that displays country flags and regional badges for users on X (Twitter).

PRIVACY_POLICY.md

Privacy Policy for TweetSanitizer

Last Updated: November 26, 2025

1. Overview

TweetSanitizer ("the Extension") is a browser extension designed to enhance the user experience on X (formerly Twitter) by displaying public location information next to usernames. We are committed to transparency regarding how we handle data.

2. Information We Collect

2.1 Public Profile Information

When you browse X/Twitter, the Extension automatically extracts publicly available information displayed on your screen or fetched via X's public API, including:

• Usernames (handles)
• Display Names
• Public Bio/Description
• Location Fields (e.g., "London, UK", "Connected via Earth")

2.2 License Information (Pro Users)

If you purchase a Pro license, we collect and store:

• Your unique License Key.
• The validity status of your subscription.

We do NOT collect:

• Your passwords or login credentials.
• Your private Direct Messages (DMs).
• Your browsing history outside of X/Twitter.
• Your payment information (credit card details are handled entirely by LemonSqueezy).

3. How We Use Your Information

The information collected is used for the following purposes:

1. Core Functionality: To map location text (e.g., "Paris") to a corresponding flag emoji (🇫🇷) and region badge.
2. Performance Optimization (Hybrid Cloud): To prevent rate-limiting by X/Twitter, the extension may query our dedicated server to retrieve location data for usernames you encounter.
3. Community Database: Public location data associated with usernames found during your browsing may be anonymously synchronized with our Cloudflare server to improve lookup speeds for other users.
4. License Verification: To validate your Pro status and unlock premium features.

4. Data Transmission and Storage

4.1 Local Storage (Browser)

To minimize network requests, processed location data and your settings (blocked countries, license key) are stored locally in your browser using the chrome.storage.local API. This cache is automatically cleared every 30 days.

4.2 External Servers

The Extension communicates with the following external endpoints:

• X (Twitter) API: Direct requests are made from your browser to x.com or twitter.com using your active session to fetch public profile details.
• TweetSanitizer Cloud (Cloudflare Workers):
  • License Check: Transmits your license key for validation.
  • Location Sync: Transmits public usernames and their associated public location strings to our central database. This allows the extension to function faster using a "Hybrid Batch-Sync" architecture.

5. Third-Party Services

• LemonSqueezy: We use LemonSqueezy to handle payments for Pro licenses. We do not process or store your financial information. Please refer to LemonSqueezy's Privacy Policy.
• Cloudflare: Our backend infrastructure is hosted on Cloudflare Workers. Please refer to Cloudflare's Privacy Policy.

6. Permissions

The Extension requests the following permissions for operation:

• host_permissions (*://*.twitter.com/*, *://*.x.com/*): Required to modify the web page to insert flags and badges.
• host_permissions (tweet-sanitizer-api.tweet-sanitizer.workers.dev): Required to communicate with our backend for licensing and data synchronization.
• storage: Required to save your settings and cache data locally.

7. User Control

• Disable Extension: You may disable the extension at any time via the browser's extension management page or the toggle in the popup menu.
• Clear Cache: You can clear locally stored data using the "Clear Cache" button in the extension popup.

8. Contact

If you have questions about this policy, please contact us at: Email: evynjohnignatious@gmail.com