X Remark – Privacy Policy

Effective date: October 12, 2026

"X 人员标注 / X Remark" (the "Extension") is a Chrome extension that lets you add personal nicknames (remarks) and groups to users on X (formerly Twitter) and shows them on X pages. This policy explains what data the Extension handles, how, and what choices you have.

1. What we do not collect

• The Extension has no account system and does not ask you to log in. It does not collect your X account, password, cookies, direct messages, or browsing history.
• It contains no analytics, tracking, or advertising code.
• We do not sell, rent, or share your data with third parties, do not use it for purposes unrelated to the Extension's single purpose, and do not use it to determine creditworthiness.

2. Data stored locally on your device

• Remarks and groups you assign to X users, stored only in the browser's local storage (chrome.storage.local).
• Built-in wallet: the Extension generates an Arweave wallet locally for encrypted backup and payments. The private key never leaves your browser.
• Creator and purchase records for remark collections you publish or buy.
• The Extension reads usernames displayed on X pages only to place your remarks next to them. Page content is never stored or transmitted.
• All remark features work offline without any network requests.

3. Data sent only when you take action

The following is sent only when you explicitly click the corresponding button, to the public Arweave permanent storage network (uploaded via upload.ardrive.io, read via arweave.net and turbo-gateway.com):

• Cloud backup: your remarks are encrypted on your device with AES-GCM before upload. Only you, holding your wallet's private key, can decrypt them. Nobody else, including us, can read them.
• Publishing a collection to the market: the title, description, price, group names, entry count, and up to 8 usernames (as a preview) are public in plain text; the remark content is encrypted. So buyers can receive purchases automatically while you are offline, the Extension's automated delivery service holds a key that can decrypt collections you have published, used solely to grant access to paying buyers. Your personal backups are not affected.
• Purchases and bids are paid on the Arweave blockchain; wallet addresses, amounts, and timestamps are publicly visible on-chain.

4. About the Arweave public network

• Arweave is a public, permanent storage network. Anyone can download data stored on it (encrypted data appears only as ciphertext).
• Once uploaded, data cannot be deleted or modified. You can delist a collection so the market no longer shows it, but previously uploaded data remains on the network.
• Do not put information you do not want to be public in public fields such as title and description.

5. Permissions

• storage: save remarks, groups, and the wallet locally.
• contextMenus: provide "Add remark for this user" in the right-click menu on X.
• alarms: periodically check whether purchased collections are ready to sync locally.
• x.com / twitter.com: display and edit remarks on the page.
• arweave.net, turbo-gateway.com, upload.ardrive.io: upload and fetch encrypted backups and collections, and connect to the remark market web page hosted on these domains.

6. Data deletion

Uninstalling the Extension or clearing its data removes all local data, including the wallet private key (use "导出账号 / Export account" in the popup first if you want to keep it). Data already uploaded to Arweave cannot be deleted due to the nature of the network, but personal backups are encrypted and unreadable without your private key.

7. Children's privacy

The Extension is not directed to children under 13 and does not knowingly collect their personal information.

8. Changes and contact

If this policy changes, a new version will be published and the link in the store listing updated. For questions, contact us via GitHub Issues.