Privacy
When you choose a website language, an essential first-party cookie named mp_lang stores only that language preference for up to one year. It is not used for tracking. Choosing browser language removes it.
In-app support requests
When you submit a support request, we store the text, category, optional reply email, extension version and a hash of your installation credential for support and abuse prevention for up to 180 days. No browsing history or media is attached automatically. You may request deletion using your receipt ID. Deleted records may remain in database backups until those backups expire.
Video download rankings
Updated extensions automatically report completed video downloads unless reporting is disabled in Settings. Reports contain the post ID, author, video position, thumbnail URL and a video-specific deduplication token. They do not include the downloader’s account, email, billing credential, post text or past download history. Only reviewed public videos are displayed. Reports expire after 90 days. A random seed stays on the device; the server receives only video-specific hashes to prevent duplicate counts. Contact support to remove a listed video. Operational infrastructure may process network addresses for request delivery and abuse prevention. Previously retired manual contributions remain excluded and expire under their original retention policy.
Updated 2026-09-20
X Media Pocket Privacy Policy Publisher: twitter_x_media_download Effective date: 2026-09-20 Privacy and support contact: nafk259@gmail.com Purpose X Media Pocket helps users collect, select and download available photos and videos from supported X pages. It is independent of X Corp. Extension data The extension processes post text, author usernames, post identifiers, media previews and URLs, and the supported X page or search context. Relevant network responses are observed for media lookup and pagination. Current X request headers are temporarily reused in the X page context for authenticated same-origin requests. X credentials, post content and downloaded files are not sent to our billing server. The extension does not collect unrelated browsing history, keystrokes or X direct messages. Local storage Preferences, saved-item records, download jobs, usage counters and a private subscription recovery key are stored in Chrome extension storage. Jobs can contain post text and media URLs. Completed files are saved through Chrome to the user's download folder. Removing the extension does not remove downloaded files or Chrome download history. Local data is not separately encrypted by this extension. Keep the recovery key private: possession of it permits subscription recovery and management. Subscriptions When using paid subscriptions, the billing server stores a hash of the installation credential and associated Paddle customer, checkout, transaction and subscription identifiers, verified paid-period end dates and refund/revocation records. Paddle processes payments on its hosted checkout and customer portal. Our extension and server do not receive raw payment card numbers. Paddle and hosting providers process data under their own privacy policies. The server verifies paid subscription access with Paddle. Installation and billing mappings are retained while needed to provide or manage the service and handle support; they have no automatic expiry. Contact us for deletion requests. Cancellation and deletion are separate: cancel recurring billing in the Paddle customer portal. Financial records may need to be retained as legally required. Operational logs Our application logs record UTC time, a predefined route category, HTTP status and duration. They do not store IP addresses, query strings, authorization headers, media content or payment request bodies. Logs are limited to 14 days and 10,000 entries, whichever limit is reached first. Connection addresses and installation identifiers are used temporarily in memory to limit requests. The website runs on Cloudflare Workers. Application observability uploads are disabled; Cloudflare may process connection information and platform diagnostics to operate and secure its network. Retention and backups Processed Paddle webhook identifiers are normally removed after 30 days by webhook processing or a daily scheduled cleanup. Log cleanup also runs daily and when log entries are recorded. Cleanup may be delayed by platform outages or exhausted service limits. We retain the latest 20 published policy revisions. The cloud database provider offers point-in-time recovery for up to 30 days. Deleted records may remain in that recovery history. Application logs store errors and billing or policy-change events, rather than every successful page visit. Cloudflare processes network requests to operate and secure this service. Deleted data may remain in backups until those backups expire. No automatic deletion of installation or subscription records is currently provided. Use and sharing Information is used to provide media downloads, manage subscriptions, prevent abuse and respond to support requests. We do not sell user data, use it for advertising targeting, creditworthiness or lending, or transfer it for purposes unrelated to this service. X receives requests needed to provide its content. Payment and hosting providers receive information necessary to provide their services. X Media Pocket's use and transfer of information received from Google APIs complies with the Chrome Web Store User Data Policy, including Limited Use requirements. Your choices You can stop collection, remove locally stored extension data, uninstall the extension, cancel your subscription through Paddle, and contact the publisher about access or deletion. Do not include X passwords, recovery keys or payment card details in support messages. Support requests If you email nafk259@gmail.com, your email address and the contents of your message are received through Gmail and used to respond to your request. Provide only information needed for your question. Support correspondence is retained while needed to resolve requests and related disputes; no automatic deletion period is currently configured. You may request deletion by contacting the same address, subject to any records that must be retained. Gmail processes correspondence under Google's privacy policy.
Google account and saved preferences
When you choose Google sign-in, we receive your verified email address and Google account identifier to create and authenticate your Media Pocket account. We do not receive your Google password. Google access tokens are used temporarily to retrieve this basic account information; we do not store Google access or refresh tokens.
We store your account identifier, email, file naming preferences, download subfolder preference and links to your extension installation credentials and subscriptions in our Cloudflare database. These records have no automatic expiry. Contact the support address on this page for access or deletion requests. Cancelling billing is separate from deleting an account.
An essential secure, HttpOnly session cookie lasts up to seven days. Login state and extension pairing records expire after ten minutes and are cleaned up on subsequent requests or daily scheduled maintenance. Log out to invalidate the current session. Downloaded files and archived post text remain on your device. The separate download ranking feature sends only the limited metadata described above; it does not use Google account or billing credentials.
The collected library uses local browser storage without a fixed collection-count cap or automatic removal of older collected items. Available disk space and browser storage limits still apply. Export a backup before uninstalling or clearing extension data.
Contact: nafk259@gmail.com
Account download limits and rankings
Downloading requires a linked account. Daily usage and download reservations are stored on our server and remain when you reinstall and reconnect the same account. The free allowance is 100 completed files per UTC day. Failed transfers release their reservation. Recovery records include the media URL, download identifier and start time for up to 100 days; media files are not stored. Verified paid installations can download before linking an account; their usage and pending download records are associated with the account when the user completes account linking. Video ranking participation can be disabled in extension settings. Participating completed videos are listed automatically with their author, source, preview and download count; no downloader account or email is displayed. Repeated downloads by one account count once per video within the retained 90-day ranking window. Contact support to request removal. Public preview URLs may expire or become unavailable.
Subscription support administration
Authorized administrators can view account emails, installation links and billing identifiers to help with subscriptions. We retain the latest billing-status snapshot and support status (needs review, waiting, or resolved) with the account while needed for service and support. Administrator operation logs record action type, outcome and time for up to 90 days and 1,000 entries; these logs do not include message contents, account identifiers or credentials. Cancellation and refunds are processed through Paddle.
Media Pocket Assist
Collections, tags, private notes, reading state and focus filters are stored locally in your Chrome extension storage. Saved post text and source URLs are stored in the local archive. These records are not uploaded to our billing server. JSON backup is a file you choose to export or import; it contains saved posts and notes, not media files or account credentials. Anyone with your backup can read its contents.
Optional translation and meaning search use Chrome on-device AI when supported. Chrome may download language or AI models; we do not send your posts or notes to an external AI service. Similar-image search compares local perceptual hashes. Indexing may fetch saved preview images from X media hosts, which receive those requests. Removing the extension removes its local data; exported backups remain where you saved them.
The billing server records the purchased Plus or Assist plan and verified paid period to determine access. Reading and exporting saved Assist data remain available after expiry.