Privacy Policy – XDownloader

This policy covers xdownloader.dev and all of its language versions. It is written to describe what the code actually does, so where something is technical we say exactly what it is rather than summarising it away. "We" means the XDownloader team, which is responsible for the processing described here. You can reach us at hello@xdownloader.dev.

What we collect

The link you submit. Pressing Download sends the post link to our extraction service so it can read the post's public details. Our code uses it to answer that one request and does not save it.
Request data. Like any website, the providers that run our services see the IP address, browser user agent and time of each request, because a request cannot be delivered without them. Their standard request logs can record the address that was requested. A lookup sends your link in the body of the request, not the address. A download's address does contain the address of the media file on X's servers and the file name. We use this data only to keep the service running and to stop abuse.
Your theme choice. Light or dark mode, saved in your browser. It is never sent to us.
Messages you send us. If you email us, we receive what you write and your address, so we can reply. The contact form opens your own email app with the message filled in; the page itself sends nothing to us.

What we don't collect

Names, passwords or account details. There is nothing to sign up for.
Payment details. The service is free and takes no payments.
A history of the links you submitted or the files you downloaded.
Copies of the videos, GIFs, photos or broadcasts you save.
Analytics, session recordings, tracking pixels or advertising identifiers.
Your clipboard. The Paste button reads it in your browser only when you press it, and the text goes nowhere unless you then run a lookup.
Location, contacts, camera, microphone or any other device permission.

We do not sell, rent or trade personal information, and no one receives it from us for marketing.

What happens to a link you paste

The link is checked. Only x.com and twitter.com links are looked up. Anything else is refused before a request is made to X.
Our service reads the post's public details. It asks X for the post as a logged-out visitor would, with no account and no credentials, which is why private and protected posts can't be fetched.
You choose a file, and it streams through us. Videos and photos are passed from X's servers to your browser as they arrive. Nothing is written to storage on the way. The step exists so the file saves with a proper name instead of opening in a player. Our download route only fetches from X's own media servers, and re-checks every redirect, so it can't be used to reach other sites.

If our main extraction service doesn't answer, your browser tries our backup services one at a time, each run on a different provider, and stops at the first that answers. The downloads for that result then go through the same service. Whichever one answers receives the same link and request data as the main service.

Broadcasts converted on your device

X broadcast replays aren't single files. They're thousands of short segments. To give you one MP4, the conversion runs in your browser:

Only the part you select is fetched. Your browser asks our service for the broadcast's segment list and then for the segments in your chosen range. Those requests carry a signed link that works for about six hours and only for that broadcast's own files.
The MP4 is assembled on your device. The converter is part of this site's own code and is only loaded when you convert a broadcast. The video is repackaged, not re-encoded or uploaded anywhere.
Where the file is built depends on your browser. Desktop Chrome and Edge ask where to save it and write straight there. Other browsers build it in the site's private browser storage, a folder called mp4-staging that only this site can read, then hand it to your Downloads. That staged copy is deleted about ten minutes later, and anything left by a closed tab is cleared the next time you convert. Browsers without that storage build the file in memory instead.
The screen stays on while it runs. The page asks your browser to keep the screen awake during a conversion, and warns you before you leave mid-way. Both stop when it finishes.

What your browser loads and stores

Cookies: none. XDownloader sets no cookies of any kind, which is why there is no consent banner.

Local storage: one value, theme, holding your light or dark choice. It is not sent with requests, and clearing site data resets it.

Browser storage: the temporary mp4-staging folder described above, used only while a broadcast is being converted and briefly after.

Preview images. The thumbnail on a result is loaded by your browser directly from X's image servers, so X receives that image request from your IP address. It is sent with no referrer, so it doesn't say which page asked. Blocking images on this site doesn't affect downloads.

Everything else is ours. Fonts, scripts and the converter are served from this site. The share buttons in the footer are plain links: nothing loads from Pinterest, Facebook, WhatsApp or Bluesky unless you click one.

Advertising

XDownloader shows no ads and loads no advertising code. If that changes, this policy will be updated before ads appear: it will name the ad provider, list the cookies it uses, and visitors in regions that require it will be asked for consent first.

Who else is involved

Our infrastructure providers host the website, the main extraction service and the backup services. They process requests only to deliver them and to protect the service, under their data processing terms. Where that involves another country, it is covered by the safeguards in those terms, including the European Commission's Standard Contractual Clauses where they apply.
X Corp. is the source of everything you download. Our services contact X on your behalf, so X sees a request from us, not from you, apart from the preview image described above. X's handling of data is covered by X's privacy policy.

How long anything is kept

Links you paste: not saved by our code.
Videos and photos: never stored. Streamed, not saved.
Broadcast download links: stop working after about six hours.
Staged broadcast files in your browser: deleted about ten minutes after they reach your Downloads, or at your next conversion.
Request logs: kept by our infrastructure providers for their standard, short retention period, for security and abuse investigation.
Emails you send: kept as long as needed to deal with them, and deleted sooner if you ask.

Legal basis (GDPR)

Where the EU or UK GDPR applies, we rely on:

Providing the service you asked for (Art. 6(1)(b)) to process the link you submit and deliver the file.
Legitimate interests (Art. 6(1)(f)) for request data used to keep the service available and free of abuse.
Consent (Art. 6(1)(a)) when you choose to write to us.

Your rights

Depending on where you live, you can ask to access, correct, delete or export personal data, restrict or object to its processing, and withdraw consent. Because there are no accounts and no download history, there is usually nothing tied to you for us to find. If you have emailed us, we can delete that correspondence. Write to hello@xdownloader.dev and we will answer within 30 days. In the EEA or UK you can also complain to your data protection authority.

California (CCPA/CPRA): you have the right to know, delete and correct personal information, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined, do not use sensitive personal information, and will not treat you differently for using these rights.

Children

XDownloader is not directed at children under 13, and we do not knowingly collect information from them. If you think a child has emailed us personal information, tell us and we will delete it.

Changes to this policy

When the way the service handles data changes, this page changes first, and the "Last updated" date at the top moves with it. Continuing to use XDownloader after an update means you accept the revised policy. The Terms of Service cover acceptable use, and the About page explains how the tool works.

Frequently asked questions

Does XDownloader keep a history of the links I paste?

No. A link is used to answer that one lookup and is not saved by our code. There are no accounts, so there is no history to attach it to.

Does XDownloader store the videos I download?

No. Videos and photos stream from X's servers through our service to your browser without being written to storage. Broadcasts are converted to MP4 inside your own browser, so the finished file only ever exists on your device.

Why is there no cookie banner?

Because XDownloader sets no cookies and loads no analytics or advertising scripts. The only value our code saves on your device is your light or dark theme choice, in local storage.

Can X see that I used XDownloader?

Not from the download itself: our service fetches the post and the file, so X sees our request rather than yours. The small preview image on the result is loaded by your browser directly from X's image servers, without telling them which page asked for it.