What stays where.

SG-X processes data in your browser to add controls to X. No user data is sent to the developer, and the extension has no analytics, telemetry or developer server.

Where the extension runs

SG-X runs only on x.com and twitter.com, including their www subdomains. It does not run on other websites. All executable extension code is included in the installed package.

What it reads and why

Page content and media. SG-X reads posts and X API responses to find media URLs, identify the post’s author and name downloaded files. Media addresses are held in a bounded in-memory cache of up to 2,000 items and disappear when the tab closes.
Account handles. The extension reads the handle shown on a post so that its block button targets the correct account. The handle is sent to X only when you request a block.
Existing X session information. SG-X observes these headers from X’s own requests: authorization, x-csrf-token, x-twitter-active-user, x-twitter-auth-type and x-twitter-client-language. If needed, it reads the ct0 cookie for the CSRF token. These values stay in page memory and are sent only back to X to perform a block you request. SG-X does not ask for your password, persist or log these values, or send them to the developer.
Page activity. SG-X responds to control clicks, pointer movement, composer focus and video events, and observes relevant X network requests. This supports its buttons, tooltips, reply insertion and playback controls. It does not build an activity log or send activity analytics.
Reusable replies. Text you save is passed to the page-context script through DOM events, which X’s own scripts could observe. Choosing a reply fills the composer. X posts it only when you click its send button.

What it stores

Browser sync storage: feature switches, reusable replies and your selection of playback-speed buttons. If browser sync is enabled, the browser may transfer these settings between your devices through its own service.
Local extension storage: volume, mute state, playback speed and the position of the controls panel, separately on each device.

No posts, account handles, session headers, downloaded media or browsing-activity logs are written to extension settings storage. Media you choose to download and reply exports are saved as files by your browser. Reply imports read only the file you select.

What it sends

Download: clicking a download button fetches the selected media from X’s media servers and passes it to your browser’s download mechanism.
Block: clicking a block button sends the target account handle and the required session headers to X’s block endpoint on the current X/Twitter site. If this fails, SG-X can operate X’s own block menu and confirmation.

The extension makes no requests to a developer service. Browser-managed synchronization, requests to X and the behavior of X’s own website are governed by those providers’ policies.

Permissions

storage remembers your settings and replies. Access to X/Twitter pages lets SG-X add its controls and use the page data described above. It does not request the downloads, tabs, cookies, webRequest or history permissions. Reading the page’s accessible ct0 cookie does not require the browser’s cookies API permission.

Your choices and retention

Turn individual features on or off in the popup. Edit or delete saved replies on the options page; settings persist until changed or removed. Closing an X tab clears its in-memory media cache and session values. To remove retained extension data, use your browser’s extension-data and sync controls. Files you downloaded or exported remain until you delete them.

Limited use

SG-X’s use of user data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is used only for the extension’s stated features. It is not sold, used for advertising, transferred for unrelated purposes, or used to determine creditworthiness or lending eligibility. The developer does not receive or review users’ page data or session information.

This website and support

This website uses no analytics scripts or tracking cookies. It is hosted on GitHub Pages. GitHub may log visitors’ IP addresses for security purposes under the GitHub Privacy Statement.

If you contact the developer for support, the information you choose to send is used to respond to your request. Please do not send passwords, cookies, session tokens or private messages. Keep screenshots limited to what is needed to describe the problem.

Questions

Visit the support page for contact details and troubleshooting. SG-X is independent of X Corp. Only download media you are entitled to keep.