privacy

What we store, what we never store.

Last updated: July 28, 2026

1. No signup means minimal identity

twitr.sh has no accounts, emails, or passwords for using the API. Your wallet address is your identifier — a pseudonymous public key. We do not ask who you are, and we have no profile of you beyond what your wallet does with the service.

2. X account credentials — never stored

If you connect an X account for write actions, the credentials you provide are relayed once to perform the login and are not stored. They are never placed in URLs, never logged, and never exposed to the software agent calling the API. What we keep is the resulting link: which handle belongs to which wallet, so ownership can be re-checked on every write. Disconnecting an account severs that link.

3. Operational data and how long it lives

Running the service requires short-lived records: per-wallet run history (which tool ran, when, for how much — visible to you in the dashboard), monitor events (up to 500 per monitor, retained ~24 hours), extraction snapshots and media download links (available about 7 days), webhook delivery logs (about 7 days), and idempotency replay entries (about 10 minutes). These exist so you can retrieve what you paid for and audit your own usage.

4. Payments are on-chain

Payments settle in USDC on public blockchains. Like all on-chain activity, those transactions are public by the nature of the networks themselves — we neither add to nor can remove that public record.

5. What we don't do

No advertising, no analytics resale, no selling or renting of any data. We do not use your queries or your connected account's data for anything other than serving your requests. Public platform data flows through to you; infrastructure providers process it only to fulfil the request.

6. Webhooks you register

If you register a webhook, we store its URL and a signing secret (shown once, hashed thereafter) and POST monitor events to it. Delete the webhook and its delivery log is removed with it.

7. Your choices and contact

Disconnect X accounts (DELETE /api/x-accounts/{handle}), delete monitors and webhooks, at any time — each is free and wallet-signed. For anything else, including data questions or deletion requests: support@twitr.sh.

This page is written for transparency in plain language and is not legal advice.