X Article Markdown PastePrivacy Policy
Last updated: September 2026
Data we collect
X Article Markdown Paste does not collect, store, or transmit any personal data, browsing data, or article content to our servers.
What the extension accesses
- Clipboard data on
x.com/compose/articles/*: when you press Ctrl+V inside the X article editor, the extension reads the pasted Markdown text from the clipboard. It is parsed and rendered into the editor entirely within your browser. - Image URLs you paste: if your Markdown contains
http(s)image links, the extension's background script fetches each image so it can be uploaded into your X article via X's own media pipeline. Only URLs that you wrote into your Markdown are fetched. - Local image files (optional): if you grant access to a local directory via the File System Access API, the extension reads referenced image files from that directory only when needed for upload. The directory handle is stored in IndexedDB; files themselves never leave your device until X uploads them.
- chrome.storage.local: used solely to store your license activation state, device ID, and a non-sensitive UI preference. Stored locally on your device only.
License validation
License keys are validated against our payment provider (Creem) via a privacy-preserving Cloudflare Worker proxy. The Worker sees only your license key and a randomly-generated device ID — never your name, email, IP-derived location, or any usage data.
What the extension does NOT do
- Does not collect any personal information
- Does not read your X account credentials, cookies, or sessions
- Does not track browsing history
- Does not access pages outside
x.com/*andtwitter.com/* - Does not inject ads or third-party analytics
- Does not transmit your article content to any third party
Third-party services
- X (Twitter): all article writing happens through X's own editor and your active X session. The extension does not impersonate or bypass X.
- Image hosts: when you paste a Markdown link to an external image, that host's server will see one HTTP request — the same as if you visited the image URL directly in your browser.
- Creem (payment processor): handles purchases and license issuance. See Creem's privacy policy.
This website
The extension itself contains no analytics. This website (xmdpaste.icy-cat.com) uses Google Analytics 4 to count visits and clicks on the install and checkout buttons, so we can tell which pages and channels are useful. Google Analytics sets first-party cookies and receives your IP address and browser details; see Google's privacy policy. You can block it with any content blocker or the Google Analytics opt-out add-on; the site works the same without it.
Data deletion
To delete all extension data, uninstall the extension from chrome://extensions. This removes the license, device ID, and any local preferences. To revoke your license server-side, email lengkuxiaomao@gmail.com.
Contact
For questions about this privacy policy, email lengkuxiaomao@gmail.com.