Your notes and identity
Effective 28 October 2026. X-notes is operated by BoostYard LLC, 16192 Coastal Hwy, Lewes, Delaware 19958, United States. Contact hello@boostyard.com for support or privacy requests.
Information we use
Connecting X gives us your stable X account ID, name, handle and avatar. We store your notes, selected source URLs and captured public source text, dates, contacts derived from those sources, and account and subscription status. X access credentials are encrypted on the server. Drafts are stored in your browser or extension until saved or cleared.
While you browse public X pages, the extension sends the current page URL to check your saved-note count and attach the launcher to the right context. Source text is captured when you save a note. It does not collect activity on other websites or read your browser history.
Your text stays in your notebook
Private note bodies, drafts, searches and exports are owner-scoped. They are not shown to the person you write about. The extension does not put your private editor text into X's page DOM.
Your identity may be visible
Premium verified owners can see that you took notes on their profile or posts, grouped by your X identity and most recent note date. Free note-takers have no identity opt-out. Active paid note-takers can hide their identity for past/future notes, contributing only an anonymous count. At subscription expiry, identity becomes visible automatically again. Deleting your last note on a page removes your activity row there.
Source text can change
We require full selected-source capture when saving. Copied platform content follows source edits/deletion/private access rules. Your own note remains when source text is removed; stale source copies must leave search and caches.
Your controls
Read, edit, delete or export your notes. Account deletion removes your notebook, indexes, sessions and activity contributions; provider financial records are retained separately by payment providers as required for their services and applicable obligations. Contact us for access, correction, deletion or other privacy requests.
Providers and storage
Google Cloud and Firebase host the app, authentication and notebook data in the United States. X supplies identity and public source content. Stripe processes subscription payments; card details are entered with Stripe and are not stored in your notebook. These providers process information needed to deliver their services. Operational logs are used for reliability and security; note text and credentials are not application log fields.
Operational request logs may contain IP addresses, request paths, status and time. IP addresses are used for service operation and security, not location tracking. Note-count and notebook-search query request logs are excluded from new log storage to limit browsing and search details in logs.
Retention
We retain your notebook until you delete its entries or your account. Copied X content can be refreshed or removed sooner. Browser drafts can be cleared in the extension or by signing out. Daily database backups expire after 7 days; database recovery versions last up to an hour, and operational logs normally last 30 days. Payment-provider records follow their own retention obligations. Contact us about erasure. No advertising trackers or analytics SDKs are part of X-notes.
Limited use and permission
Our use of user data adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements.
Extension data is used for the disclosed note-taking, search, contacts and activity features and their operation. No browsing-history collection or advertising data sale is part of this product. Live source access and extension-store availability depend on provider access and review. X-notes cannot report activity outside X-notes.
Policy changes
Material changes will be explained in the product and reflected in this page's effective date. Contact us before using X-notes if you need help understanding the identity visibility rule.