XMate Privacy Policy

XMate is a free, local-first browser extension for X and LinkedIn. There is no account and no sign-up. Your contacts, notes and interaction history are stored on your own device, in your browser — not on our servers. This policy explains, plainly, what stays local, the little we collect, and the one optional feature that sends data to a third party.

Questions about this policy? Contact us at giapdong.dev@gmail.com.

The short version

• Your CRM data (contacts, notes, touchpoints, reminders, tags, settings) is stored locally in your browser and never sent to us.
• We do not require an account and we do not know who you are.
• We collect only anonymous product analytics to understand which features are used.
• One feature is different: the optional AI reply assistant. If — and only if — you turn it on and add your own API key, the message you are replying to is sent from your browser to your chosen AI provider (OpenRouter) to draft a response. It is off by default.

What XMate stores on your device

Everything you create in XMate lives in your browser's local extension storage on your machine:

• Contacts you save, and the notes, tags and reminders you add to them.
• Touchpoints — a record of interactions you take (like, reply, repost, follow, DM) with people you choose to track.
• Your settings and preferences.

This data is never transmitted to us. You can export it (JSON/CSV) or delete it at any time, and uninstalling the extension removes it.

What we collect about you

Nothing that identifies you personally. We use Google Analytics to collect anonymous, aggregated usage data — for example which pages of this website are viewed and which extension features are opened — tied to a random analytics identifier, not to your name, email or account (there is no account). We never send the content of your contacts, notes, messages or touchpoints to analytics.

Third-party services

Google Analytics (anonymous usage)

We use Google Analytics to understand how the website and extension are used so we can improve them. It records anonymous events and does not receive your CRM data. You can opt out with the Google Analytics opt-out add-on. See Google's Privacy & Terms.

OpenRouter (only if you enable the AI reply feature)

XMate includes an optional AI reply assistant that helps you draft messages. It is off by default and works only after you turn it on and connect your own API key. When you use it, the conversation or post you are replying to — plus the instruction you type — is sent directly from your browser to OpenRouter (and the model provider you pick through it) to generate a draft reply. This request uses your API key; XMate runs no server in between and does not receive or store this data. If you never enable the feature, no conversation content ever leaves your device. See OpenRouter's privacy policy.

What we do NOT do

• We do not sell or rent your data to anyone.
• We do not collect payment information — XMate is free.
• We do not use license keys or collect device identifiers.
• We do not upload your contacts, notes or touchpoints anywhere.
• We do not scrape, auto-message, or track other people's activity for you.

Browser permissions we request, and why

• Storage — to save your CRM data locally in your browser.
• Notifications — to show follow-up reminders you set.
• Alarms — to schedule those reminders.
• Access to x.com and linkedin.com — so the extension can read the profile or conversation you have open and show its features on the page. It runs only on those sites.
• Access to openrouter.ai — used only by the optional AI reply feature described above.

Your control over your data

Because your data is local, you are in control. Export it to JSON or CSV, clear your touchpoint history, or delete individual contacts at any time in the extension. Uninstalling XMate removes the data stored in your browser.

Children

XMate is not directed to children under 13 and we do not knowingly collect data from them.

Changes to this policy

We may update this policy to reflect changes to the product or to how data is handled. Material changes will be reflected here with a new date below.

Last updated: August 2026