XExport 隐私政策
最后更新：2026 年 5 月 · 适用版本：XExport 1.0 及以上
核心承诺：XExport 不收集任何个人信息，不向任何服务器传输数据，所有操作均在您的本地设备上完成。
1. 我们收集哪些数据
XExport 不收集、不存储、不传输任何用户个人信息。具体而言：
- 不收集姓名、邮箱、密码或任何账户凭据
- 不收集浏览历史或其他标签页的内容
- 不收集设备信息、IP 地址或地理位置
- 不收集使用行为、崩溃报告或分析数据
2. 本地临时存储
插件仅使用 chrome.storage.local 在本机暂存以下信息，用于在后台脚本与内容脚本之间传递任务参数：
- 您在弹出窗口中填写的目标用户名
- 导出模式设置（全部推文 / 时间范围 / 最新 N 条）
- 当前导出标签页的 ID（用于任务完成后关闭标签页）
以上数据仅存储在您的本机，不会离开您的设备，且在导出任务结束后自动清除。
3. 对 X.com 页面内容的访问
为完成推文导出，插件会在您访问的 X.com 用户主页上执行以下操作：
- 拦截页面自身已发出的推文 API 响应（只读，不发送新的独立请求）
- 模拟页面滚动以触发 X.com 加载更多推文
- 将拦截到的推文数据整理后生成 CSV 文件，直接保存到您的本地设备
插件仅访问您主动打开的目标用户页面，不访问您的私信、个人设置或其他任何页面。
4. 数据传输与第三方共享
无插件不与任何第三方共享数据，不包含任何远程服务器请求、分析 SDK 或广告模块。
导出的 CSV 文件仅保存在您的本地磁盘，如何使用完全由您决定。
5. 权限说明
- storage临时保存导出任务配置，在后台与内容脚本之间传递参数
- tabs打开目标用户的 X 主页、在标签页加载完成后启动导出、完成后关闭标签页
- 主机权限 x.com / twitter.com向这两个域名的页面注入内容脚本，拦截页面自身的推文 API 响应
6. 无远程代码
XExport 不加载任何来自外部服务器的脚本或资源。所有代码均打包在扩展安装包内，符合 Chrome MV3 的远程代码禁止要求。
7. 儿童隐私
本插件不面向 13 岁以下儿童，也不有意收集儿童的任何信息。
8. 隐私政策的变更
如本政策发生重大变更，我们将在 Chrome Web Store 商品详情页或 GitHub 仓库中发布更新版本，并更新页面顶部的日期。建议您定期查看。
9. 联系方式
XExport Privacy Policy
Last updated: May 2026 · Applies to: XExport 1.0 and above
Core commitment: XExport collects no personal information, transmits no data to any server, and performs all operations entirely on your local device.
1. Data We Collect
XExport does not collect, store, or transmit any personal information. Specifically:
- Not collectedName, email address, password, or any account credentials
- Not collectedBrowsing history or content from any other tab
- Not collectedDevice identifiers, IP address, or location data
- Not collectedUsage analytics, crash reports, or telemetry
2. Local Temporary Storage
The extension uses chrome.storage.local solely to pass task parameters between the background service worker and the content script. The following information is stored locally:
- The target username you enter in the popup
- Your chosen export mode (all tweets / date range / latest N)
- The ID of the current export tab (used to close it after the task completes)
This data never leaves your device and is automatically cleared when the export task ends.
3. Access to X.com Page Content
To export tweets, the extension performs the following actions on the X.com profile page you open:
- Intercepts tweet API responses already issued by the page itself (read-only; no independent requests are made)
- Simulates page scrolling to prompt X.com to load more tweets
- Organizes intercepted tweet data and saves it as a CSV file directly to your local device
The extension only accesses the target profile page you explicitly open. It does not access your direct messages, account settings, or any other page.
4. Data Transmission and Third-Party Sharing
NoneThe extension shares no data with any third party. It contains no remote server calls, analytics SDKs, or advertising modules.
The exported CSV file is saved only to your local disk. How you use it is entirely up to you.
5. Permissions Explained
- storageTemporarily stores export task configuration to pass parameters between the background script and content script
- tabsOpens the target user's X profile, sends the start signal once the tab is loaded, and optionally closes the tab when done
- Host permissions x.com / twitter.comInjects content scripts into these domains to intercept the page's own tweet API responses
6. No Remote Code
XExport does not load any scripts or resources from external servers. All code is bundled within the extension package, in full compliance with Chrome MV3's prohibition on remotely hosted code.
7. Children's Privacy
This extension is not directed at children under the age of 13, and we do not knowingly collect any information from children.
8. Changes to This Policy
If this policy changes materially, we will post an updated version on the Chrome Web Store listing page or the GitHub repository and update the date at the top. We recommend checking periodically.
9. Contact