ScoreX by Unique Labs
Privacy Policy
The short version
- ScoreX runs in your own browser, in your own logged-in X (Twitter) session. It never asks for or stores your X password.
- Your targets, reply history, settings and API keys are stored only in your browser.
- Post text is sent to OpenAI, with your own API key, to write replies. Score sites are contacted only if you turn them on.
- Our license server sees only what it needs to check your license key.
- We do not sell or share your data, and ScoreX has no ads, analytics or trackers.
What ScoreX stores on your device
Everything ScoreX works with stays in your browser's extension storage (chrome.storage and the extension's own IndexedDB):
- the accounts you choose to reply to, and what ScoreX reads from their public X profiles and posts (name, bio, follower and following counts, recent posts);
- the replies it drafted and posted, their results (likes, replies, views, follow-backs) and the activity log;
- your settings, your tone prompt and your license status;
- your API keys (OpenAI and, if you add them, score sites). Keys are kept in the extension's own IndexedDB, which web pages and other extensions cannot read. They are never written to logs, never included in a backup export and never sent anywhere except to the service they belong to.
You can export this data (API keys are never exported). Removing the extension deletes all of it. Settings > Reset everything deletes your settings, targets, history and logs; it keeps your API keys, the cost ledger and the replies from the last 8 days, which the daily safety limits depend on.
What leaves your device, and why
| Sent to | What | Why |
|---|---|---|
| x.com (X Corp.) | Normal page views, likes, follows and the replies you approve, in your own logged-in session. | To read posts from the accounts you chose and to post your replies. This is the same as using X yourself; X's own privacy policy applies. |
| OpenAI (api.openai.com) | The text of the post being replied to (plus its quoted post and image links), the author's bio, your tone prompt and a few of your recent replies. | To write a reply, with your own API key. OpenAI's API data-usage policy applies to your account. ScoreX asks OpenAI not to store the requests (store: false). |
| Score sites you turn on (TwitterScore, Sorsa, Ethos, Moni) | X usernames: yours, and those of accounts you look up or choose as targets. | To show scores and smart followers. Each site is contacted only after you turn it on and grant Chrome's permission for it. |
| ScoreX license server (scorex-license.vercel.app) | Your license key, a random install ID created by the extension, and the extension version. | To check that the license key is valid and used on one installation. See below. |
ScoreX sends nothing else. It does not collect your browsing history, contacts, location or any data from websites other than those listed above.
The license server
ScoreX is currently invite only and needs a license key. When you activate it, and every few hours afterwards, the extension sends your license key, a random install ID and the extension version to our license server. The server keeps:
- a one-way SHA-256 hash of the key (not the key itself) and its last four characters, so we can recognise it;
- the install ID it was activated on, the extension version, and when it was activated and last checked;
- an optional note we wrote when issuing the key (for example, who it was issued to).
Your IP address is used only to limit repeated attempts: it is kept in a short-lived counter that expires after 10 minutes and is not stored with your key. The server is hosted on Vercel with an Upstash Redis database.
How we use data
Data is used only to provide ScoreX's single purpose: helping you reply to the accounts you choose on X and track the results. We do not sell data, use it for advertising, use it to determine creditworthiness or lending, or transfer it to third parties except as described above. ScoreX's use of information received from Chrome APIs follows the Chrome Web Store User Data Policy, including the Limited Use requirements.
Your choices
- Review mode (the default) lets you approve every reply before it is posted.
- Score sites are off until you turn them on, and you can turn them off at any time.
- Removing the extension deletes everything ScoreX stores on your device; Settings > Reset everything deletes almost all of it (see above).
- To have your license record deleted from our server, contact us with your key's last four characters.
Children
ScoreX is not intended for anyone under 13, or under the minimum age to use X in their country.
Changes
If this policy changes, we will update this page and the date at the top. Material changes will also be noted in the extension's store listing.
Contact
Unique Labs · Developed by Shahriar Ahmed
Email: contact@shahriarahmed.net