Privacy

We never store your X password, your X cookies or your login session. You log in to X in your own browser, and that login stays in your browser. FollowLoop clicks on the page like you would.

What we store

• Your account: your email address. If you sign in with Google, also your Google account ID, so the same Google account finds the same FollowLoop account.
• Sign-in codes: the 6-digit codes we email you are stored scrambled (hashed), expire after 10 minutes, and allow 5 tries.
• Sessions and devices: a sign-in session for this site, and a separate device token for each browser where FollowLoop is installed, with when it was last used. We only keep these scrambled (hashed).
• Your plan: which plan you're on, whether it's active, and your Dodo Payments customer and subscription IDs.
• The free trial: which X handles have had their free trial, and when it started, so each X account gets one.
• The X handles you connect, and for each one your niches and settings (running or paused, unfollow on or off).
• Follow actions: which accounts FollowLoop followed for you, skipped, or found you already follow, and 4 days after a follow whether that account followed you back or FollowLoop unfollowed it, with the time.
• Your follower count once a day, per handle, so the dashboard can chart it.
• Pacing details: when the last round ran and when X last showed a rate limit, so FollowLoop knows when to slow down.

Google sign-in

If you choose Google, Google sends us your email address, your name and your profile picture, and confirms that the email is verified. We keep the email and your Google account ID, and nothing else from Google. The sign-up page loads Google's sign-in button from accounts.google.com.

Emails we send

We email you sign-in codes, and messages about your plan when something changes, like a new price. We send them through Resend, which handles your email address only to deliver them. No newsletters unless you ask for them.

Shared lists of accounts

The extension collects public X handles from public X search pages and follower lists, and stores them per niche. That's how everyone's daily lists stay fresh. Accounts that fail the filters, like spam bios, are marked so no one is sent to them again. These lists contain public handles only, not anything about you.

Payments

Dodo Payments is our merchant of record: it sells you the plan and takes the payment. Dodo gets your email address and payment details to do that and to handle tax and invoices, under its own privacy policy. We never see your card number.

What we never collect

• Your X password, cookies or session.
• Your DMs, your posts, or your browsing history.
• Your card details.

Where it lives

The site, the FollowLoop service and its database run on Cloudflare. Payments are handled by Dodo Payments. We don't sell your data, and we don't use ad trackers on this site.

This site serves its own fonts, so no font service sees your visit.

In your browser

Signing in sets one cookie, fl_session, that keeps you signed in on this site for 30 days. Signing out ends that session. The site also keeps a few small notes in your browser's storage, like the plan you picked on the pricing page and which X account you last looked at in the dashboard. The extension keeps its device token in the browser it's installed in.

How long we keep it

We keep your data while your account exists, so your history and chart stay intact. Email us any time to have your account and data deleted.

Contact

FollowLoop is run by KDX Studios (Khushal Dewra). Write to thekhushaldewra@gmail.com for questions or to delete your data.